CVE-2026-108810
tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument _func results in information disclosure. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.5.3 is recommended to address this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
| CWE | CWE-200 CWE-284 |
| Vendor | tsi-coop |
| Product | tsi-dpdp-cms |
| Published | Oct 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for tsi-coop tsi-dpdp-cms
Be the first to know when new medium vulnerabilities affecting tsi-coop tsi-dpdp-cms are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
tsi-coop / tsi-dpdp-cms
0.5.0 0.5.1 0.5.2
References
vuldb.com: https://vuldb.com/vuln/416587 vuldb.com: https://vuldb.com/vuln/416587/cti vuldb.com: https://vuldb.com/cve/CVE-2026-108810 vuldb.com: https://vuldb.com/submit/963801 github.com: https://github.com/kavinkumarst/TSI-DPDP-CMS-API-Parameter-Schema-Enumerable-Without-Authentication/blob/main/README.md github.com: https://github.com/tsi-coop/tsi-dpdp-cms/blob/v0.5.3/docs/security-fixes/4.md github.com: https://github.com/tsi-coop/tsi-dpdp-cms/releases/tag/v0.5.3 github.com: https://github.com/tsi-coop/tsi-dpdp-cms/
Credits
🔍 Kavin Kumar S T (VulDB User) VulDB CNA Team