Skip to content
OpenAdvisories

Vendor

apitable

5 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 7.5

    APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpoint

    APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identi…

  • High 8.2

    APITable through 1.13.0-beta.1 Missing Authentication on the Internal Account Closure Endpoints

    APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx …