Skip to content
OpenAdvisories

Product · blackholll

loonflow

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-121937

    loonflow before r3.2.3 IDOR via ticket_flow_history Endpoint

    loonflow before r3.2.3 contains a missing authorization vulnerability in TicketFlowHistoryView that allows any authenticated user to read other users' ticket flow history by supplying a ticket UUID. Attackers can request the ticket_flow_history endpoint, whic…

    blackholll loonflow