Advisories · Technology
cloudbeaver.
Every CVE that names cloudbeaver among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access
- cloudbeaver
- Path traversal
- CVSS 6.5 Medium
CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass
- cloudbeaver
- Broken access control
- CVSS 5.3 Medium
CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-projects sandbox
- cloudbeaver
- Path traversal
- CVSS 2.3 Low
CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet
- CloudBeaver
- Broken access control
- CVSS 5.3 Medium
CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation
- CloudBeaver
- Broken access control