Openreplay vulnerabilities
Products
Newest
- openreplay OpenReplay: Authenticated ClickHouse SQL injection via session search 5.4 Medium
- openreplay OpenReplay: Cross-tenant session replay disclosure via missing session ownership check in first-mob endpoint 7.1 High
- openreplay OpenReplay: Cross-user IDOR in notes and dashboard widgets 7.1 High
- openreplay OpenReplay: Unauthenticated stored XSS leads to dashboard account takeover 9.3 Critical
- openreplay OpenReplay: Cross-tenant information disclosure in app_apikey projectKey routes via missing tenant binding 7.7 High
- openreplay Cross-tenant IDOR on feature-flag and assist-stats routes via {project_id} case mismatch 5.3 Medium
- openreplay OpenReplay: SQL injection in cards/search via unvalidated sort field parameter 6.9 Medium
- openreplay OpenReplay HTML Injection vulnerability 6.5 Medium