{"id":"CVE-2026-113359","title":"Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint","summary":"Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endpoint. Attackers can enumerate sequential field IDs to ret…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvssSource":"cna","cwe":["CWE-639"],"vendor":"Baserow","product":"Baserow","affected":["Baserow < 2.3.0"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T15:40:23.156Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113359","references":[{"url":"https://github.com/baserow/baserow/issues/4870"},{"url":"https://github.com/baserow/baserow/security/advisories/GHSA-r8cf-4rgr-x5cv","label":"GitHub Security Advisory (GHSA-r8cf-4rgr-x5cv)"},{"url":"https://github.com/baserow/baserow/commit/6884c1a49adb5eb0a32de1220e6d9f99e9d97c1f"},{"url":"https://github.com/baserow/baserow/releases/tag/2.3.0","label":"Baserow 2.3.0 Release Notes"},{"url":"https://github.com/baserow/baserow/blob/2.2.2/backend/src/baserow/contrib/database/api/fields/views.py"},{"url":"https://www.vulncheck.com/advisories/baserow-before-2.3.0-cross-workspace-data-disclosure-via-unique-row-values-endpoint","label":"VulnCheck Advisory: Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T16:10:53.307Z","slug":"CVE-2026-113359","body":"## Overview\n\nBaserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endpoint. Attackers can enumerate sequential field IDs to retrieve up to 100 distinct cell values per field from tables in workspaces they do not belong to.\n\n## Affected\n\n- `Baserow < 2.3.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}