Advisories · Technology
lotus.
Every CVE that names lotus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.6 High
Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint
- lotus
- Broken access control
- CVSS 8.2 High
Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix
- lotus
- Authentication bypass
- CVSS 8.7 High
Lotus through 0.10.2 SQL Injection via Subscription Filter Keys
- lotus
- SQL injection
- CVSS 8.7 High
Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters
- lotus
- SQL injection
- CVSS 8.7 High
Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics
- lotus
- SQL injection
- CVSS 6.0 Medium
Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet
- lotus
- Broken access control