CVE-2026-111614
DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source, snippet and dashboard endpoints to retrieve serialized datasource host, port, username and cleartext passwords.
| CWE | CWE-639 |
| Vendor | devlive-community |
| Product | datacap |
| Published | Oct 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for devlive-community datacap
Be the first to know when new medium vulnerabilities affecting devlive-community datacap are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
devlive-community / DataCap
0 ≤ 2025.1.1
References
hackmd.io: https://hackmd.io/@hieuPenguinnn/metaforge-datacap-source-getbyid-cross-user-idor github.com: https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-service/src/main/java/io/edurt/datacap/service/service/BaseService.java#L38-L43 github.com: https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-server/src/main/java/io/edurt/datacap/server/controller/BaseController.java#L91-L95 vulncheck.com: https://www.vulncheck.com/advisories/datacap-through-2025.1.1-idor-via-basecontroller-getinfoforpath-exposes-credentials
Credits
hieuPenguinnn