Skip to content
OpenAdvisories

Vendor

Parabol

1 known vulnerabilities.

Products

Parabol 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-125748

    Parabol before 15.21.2 Missing Authorization via addReactjiToReactable Mutation

    Parabol before 15.21.2 contains a missing authorization vulnerability in the addReactjiToReactable GraphQL mutation that allows authenticated users to tamper with reactions on other organizations' content. Attackers can pair their own meetingId with a reactab…

    Parabol Parabol