Skip to content
OpenAdvisories

Product · airbytehq

airbyte-platform

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId

    Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised identifiers out of the raw JSON request body into X-Airbyte-* headers, and AuthenticationHeaderResolver.…