| शीर्षक | theonedev onedev 15.05 BOPLA |
|---|
| विवरण | Issue 02 — Unauthorized Parent Project Rebinding via parentId
Risk Summary
A user who can manage a project may be able to change the project's parentId to another parent namespace where the user does not possess CreateChildren permission.
Once the parent relationship changes, the project path, ancestor hierarchy, inherited settings, and permission propagation chain may all change accordingly.
This issue primarily affects project hierarchy integrity and namespace-boundary enforcement. |
|---|
| स्रोत | ⚠️ https://www.cnblogs.com/aibot/p/19994142 |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 08/05/2026 08:28 AM (1 महीना पहले) |
|---|
| संयम | 06/06/2026 12:21 AM (29 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 369019 [theonedev तक 15.0.5 Parent Project /projects/ project.parentId अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|