Skip to content
OpenAdvisories

Product · devlive-community

DataCap

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-111614

    DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials

    DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerat…

    devlive-community DataCap