CyberRota Analysis
AI-GeneratedOverseerr versions up to 1.35.0 are vulnerable to an authorization bypass in the push subscription API, allowing authenticated users to manipulate other users' push subscriptions by providing arbitrary user IDs. This flaw can lead to unauthorized access to sensitive information, such as email addresses and plexId values, potentially compromising user privacy. Organizations using this software should prioritize patching to mitigate the risk of data leakage and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters. Attackers can exploit the missing ownership check in the affected handlers to access target user records without the filteredFields filter, leaking sensitive data including email addresses and plexId values.