CVE Intelligence

Yahoo Elide vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Yahoo Elide: 1 record(s), with affected versions and fixes.

CVE-2026-57954 Medium · 4.3 CWE-862 Jun 29, 2026
Elide 7.1.17 - Permission Bypass in Sort Expression Validation
Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSortingRules, allowing attackers to sort collections by forbidden fields. Attackers can infer hidden field values through row ordering analysis, leaking relative field ordering across all rows via both JSON:API and GraphQL read paths.