CVE Intelligence

Vulnerabilidades de TomBursch

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de TomBursch: 1 registro(s), com severidade, exploração e correções.

Kitchenowl 1

Somente exploradas (KEV) →

CVE-2026-101033 Média · 4.3 CWE-639 27/09/2026
KitchenOwl through 0.7.10 IDOR via unchecked category ID
KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations. Authenticated attackers can enumerate category IDs from other households to read their category names, budgets, and colors, breaking household isolation.