Advisories · Technology
roostorg coop.
Every CVE that names roostorg coop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
Coop sessions are not invalidated on password reset
- roostorg coop
- Authentication bypass
- CVSS 7.4 High
Coop has SAML cross-tenant authentication bypass
- roostorg coop
- Authentication bypass
- CVSS 5.3 Medium
Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUser
- roostorg coop
- Broken access control
- CVSS 8.7 High
Coop has a data leak via unauthenticated GraphQL Query.allOrgs
- roostorg coop
- Authentication bypass
- CVSS 6.9 Medium
Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg
- roostorg coop
- Authentication bypass
- CWE-799