{"id":"CVE-2026-111614","title":"DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials","summary":"DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged …","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-639"],"vendor":"devlive-community","product":"DataCap","affected":["DataCap <= 2025.1.1"],"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-21T20:37:02.096114Z"},"exploitAvailable":true,"published":"2026-10-16","updated":"2026-10-21","sourceUpdated":"2026-10-21T20:37:34.593Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111614","references":[{"url":"https://hackmd.io/@hieuPenguinnn/metaforge-datacap-source-getbyid-cross-user-idor"},{"url":"https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-service/src/main/java/io/edurt/datacap/service/service/BaseService.java#L38-L43"},{"url":"https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-server/src/main/java/io/edurt/datacap/server/controller/BaseController.java#L91-L95"},{"url":"https://www.vulncheck.com/advisories/datacap-through-2025.1.1-idor-via-basecontroller-getinfoforpath-exposes-credentials","label":"VulnCheck Advisory: DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials"}],"tags":["cve.org","exploit-available"],"epss":0.00386,"epssPercentile":0.3252,"ingestedAt":"2026-10-16T18:43:08.694Z","slug":"CVE-2026-111614","body":"## Overview\n\nDataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source, snippet and dashboard endpoints to retrieve serialized datasource host, port, username and cleartext passwords.\n\n## Affected\n\n- `DataCap <= 2025.1.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":227417,"id":"CVE-2026-111614","ts":1792617473949,"field":"exploit_available","old":"false","new":"true"}]}