Filtered by vendor Tess1o
Subscriptions
Filtered by product Geopulse
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-129467 | 1 Tess1o | 1 Geopulse | 2026-11-15 | 4.3 Medium |
| GeoPulse 1.5.0 through 2.3.0 contains an insecure direct object reference vulnerability in GET /api/v1/places/geocoding/{id} that allows authenticated users to read other users' private locations. Attackers can enumerate sequential reverse_geocoding_location ids to retrieve other users' custom place names, city, country, coordinates and bounding boxes from their history. | ||||
Page 1 of 1.