{"id":"CVE-2026-111614","title":"DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials","summary":"DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged …","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-639"],"vendor":"devlive-community","product":"DataCap","affected":["DataCap <= 2025.1.1"],"published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T17:38:53.190Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111614","references":[{"url":"https://hackmd.io/@hieuPenguinnn/metaforge-datacap-source-getbyid-cross-user-idor"},{"url":"https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-service/src/main/java/io/edurt/datacap/service/service/BaseService.java#L38-L43"},{"url":"https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-server/src/main/java/io/edurt/datacap/server/controller/BaseController.java#L91-L95"},{"url":"https://www.vulncheck.com/advisories/datacap-through-2025.1.1-idor-via-basecontroller-getinfoforpath-exposes-credentials","label":"VulnCheck Advisory: DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials"}],"tags":["cve.org"],"ingestedAt":"2026-10-16T18:43:08.694Z","slug":"CVE-2026-111614","body":"## Overview\n\nDataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source, snippet and dashboard endpoints to retrieve serialized datasource host, port, username and cleartext passwords.\n\n## Affected\n\n- `DataCap <= 2025.1.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}