Skip to content
OpenAdvisories

Vendor

OWASP

8 known vulnerabilities.

Products

ModSecurity Core Rule Set 4 DefectDojo 2 java-html-sanitizer 1 NodeGoat 1 ModSecurity 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-16764 Public exploit

    OWASP DefectDojo API/Web serializers.py UserSerializer privileges management

    A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/api_v2/serializers.py of the component API/Web. Such manipulation of the argument is_staff leads to improper privilege management. The a…

    OWASP DefectDojo