Typebot Cross-workspace OAuth Credential Takeover via Insecure Direct Object Reference (CVE-2025-48765)

github.com 2026-08-12查看中文 →

Security AdvisoryCVE-2025-48765CriticalTypebot

Affected:

Typebot <= 3.16.1

Fixed in:

3.16.2

Referenced CVEs: CVE-2026-48765 · 9.9

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Fulcio v1.8.5 CVE-2025-4978: OIDC SSRF, JWKS Substitution, and K8s SA Token Leakage 2026-08-13 OpenID Connect Cross-host Redirect and Bearer Token Leakage Fix 2026-08-13 HR Expense Module File Upload RCE Vulnerability Analysis and Fix 2026-08-13 sigstore/fulcio v1.8.6 Patch: Block Cross-Origin Redirects and Restrict Bearer Tokens 2026-08-13 Unauthenticated RCE via Unrestricted File Upload in WebERPmesv2 HR Expense 2026-08-13

Offline Archive

Offline screenshot & PDF are Pro-exclusive