Advisories · Technology
kaneo.
Every CVE that names kaneo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.4 High
Kaneo: Gitea integration access token and webhook secret exposed to any workspace member
- kaneo
- Information disclosure
- Hard-coded credentials
- CVSS 7.7 High
Kaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Access
- kaneo
- Broken access control
- CVSS 7.2 High
Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint
- kaneo
- Broken access control