Skip to content
OpenAdvisories

Product · oss-apps

SplitPro

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-122317

    SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query

    SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest e…

    oss-apps SplitPro