Skip to content
OpenAdvisories

Vendor

steedos

2 known vulnerabilities.

Products

steedos-platform 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-111666

    Steedos Platform through 3.0.15-beta.51 Cross-Tenant Information Disclosure via Reports API

    Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows authenticated users to read other tenants' report definitions by querying the reports object. Because objectql's callAdapter skips space filtering for enable_sp…

    steedos steedos-platform
  • Medium 6.1
    CVE-2026-91922

    Steedos Platform through 3.0.15-beta.47 Reflected XSS via page render

    Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query parameters in inline script elements. Attackers can craft malicious links with scrip…

    steedos steedos-platform