thinfinity_workspace vulnerabilities
3 known vulnerabilities in thinfinity_workspace from Cybelesoft. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
thinfinity_workspace: Missing Authentication for Critical Functionality
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges.
- 8.1 High severity
thinfinity_workspace: Missing Authentication for Critical Functionality
Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request.
- 9.8 Critical severity
thinfinity_workspace: Missing Authentication for Critical Functionality
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established.