CVE-2026-115400
- Source
- https://cve.org/CVERecord?id=CVE-2026-115400
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-115400.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-115400
- Published
- 2026-10-22T13:23:38Z
- Modified
- 2026-10-23T02:45:50Z
- Severity
-
- 6.7 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- crawlseo before 0.2.5 Cleartext Storage of Google OAuth Tokens
- Details
-
crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long-lived refresh tokens from a compromised or exposed Postgres database to gain indefinite, unauthenticated access to all registered users' Google Search Console data.
- Database specific
{ "cna_assigner": "VulnCheck", "cwe_ids": [ "CWE-312" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/115xxx/CVE-2026-115400.json" }- References
-
- https://gist.github.com/mansurmavlankulov/47cb8e183fec39a7afe599d1082a3399
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/115xxx/CVE-2026-115400.json
- https://github.com/crawlseo/crawlseo
- https://github.com/crawlseo/crawlseo/commit/2ce0b4b2bdd6047e0a9ede037fd355381968d9bc
- https://github.com/crawlseo/crawlseo/releases/tag/v0.2.5
- https://nvd.nist.gov/vuln/detail/CVE-2026-115400
- https://www.vulncheck.com/advisories/crawlseo-before-cleartext-storage-of-google-oauth-tokens
Affected packages
Git / github.com/crawlseo/crawlseo
Affected ranges
- Type
- GIT
- Repo
- https://github.com/crawlseo/crawlseo
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0.1.0" }, { "fixed": "0.2.5" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "original_tag": "v0.2.5", "range": [ { "fixed": "7d87de925cc9a8890ece8b453bda677534c22617" } ], "source": "REFERENCES_TAG" }, { "range": [ { "fixed": "2ce0b4b2bdd6047e0a9ede037fd355381968d9bc" } ], "source": "REFERENCES_COMMIT" } ] }