CVE-2026-42279
- Source
- https://cve.org/CVERecord?id=CVE-2026-42279
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42279.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-42279
- Aliases
-
- GHSA-pmf9-pxq9-ccwr
- Published
- 2026-05-08T03:57:31Z
- Modified
- 2026-11-13T02:30:34Z
- Severity
-
- 5.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N CVSS Calculator
- Summary
- solidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUID
- Details
-
solidtime is an open-source time-tracking app. In version 0.12.0, the PUT /api/v1/organizations/{organization}/time-entries/{timeEntry} API accepts a route-bound timeEntry from another organization when the caller has time-entries:update:all in the URL organization, allowing a known foreign time-entry UUID to be modified and rebound to objects in the caller's organization. This issue has been patched in version 0.12.1.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-639" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42279.json" }- References
-
- https://github.com/solidtime-io/solidtime/releases/tag/v0.12.1
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42279.json
- https://github.com/solidtime-io/solidtime/security/advisories/GHSA-pmf9-pxq9-ccwr
- https://nvd.nist.gov/vuln/detail/CVE-2026-42279
- https://github.com/solidtime-io/solidtime/commit/b73aa543fdf5b61c37447307ab7277451296832c
Affected packages
Git / github.com/solidtime-io/solidtime
Affected ranges
- Type
- GIT
- Repo
- https://github.com/solidtime-io/solidtime
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "= 0.12.0" }, { "last_affected": "= 0.12.0" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "fixed": "b73aa543fdf5b61c37447307ab7277451296832c" } ], "source": "REFERENCES_COMMIT" }, { "original_tag": "v0.12.1", "range": [ { "fixed": "b73aa543fdf5b61c37447307ab7277451296832c" } ], "source": "REFERENCES_TAG" } ] }