SingleStore

SingleStore 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 业务逻辑4
• 访问控制2
• 不安全的直接对象引用2
• 身份认证1
• 路径遍历1

主要弱点

• 业务逻辑错误4
• IDOR2
• 认证绕过1
• External Control of File Name or Path1
• Missing Authorization1
• 权限提升1

常见资产

• backend.singlestore.comURL · 8
• https://portal.singlestore.com/URL · 1
• singlestoredb-serverDOWNLOADABLE_EXECUTABLES · 1

高票报告

当前状态 10 份 · 全部 10

1. 96
   2FA bypass possible on https://authsvc.singlestore.com身份认证 · 2025-10-22 · 中危
   $0认证绕过
2. 77
   IDOR - Scheduled data leak to other accounts By "projectID"业务逻辑 · 2025-08-13 · 中危
   $0业务逻辑错误
3. 70
   Exceed the maximum number of subscribers using Race Condition业务逻辑 · 2025-08-13 · 低危
   $0业务逻辑错误
4. 62
   Exceeding the limit of Workspaces via Race Condition业务逻辑 · 2025-10-06 · 中危
   $0业务逻辑错误
5. 50
   SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the server访问控制 · 2026-07-14 · 高危
   $0Missing Authorization
6. 39
   Insecure Direct Object Reference (IDOR) allows creating folders.不安全的直接对象引用 · 2026-07-02 · 低危
   $0IDOR
7. 35
   Delete any folder for any user within the organization不安全的直接对象引用 · 2026-07-02 · 低危
   $0IDOR
8. 35
   Exceeding the maximum number of spaces allowed by exploiting a Race Condition in the Workspace creation process业务逻辑 · 2026-07-02 · 低危
   $0业务逻辑错误
9. 26
   Privilege Escalation – Access to the Alert Subscribers page for users with low privileges访问控制 · 2026-07-02 · 低危
   $0权限提升
10. 12
    Insufficient checks in the file path parameter allow writing to unauthorized directories路径遍历 · 2026-06-24 · 低危
    $0External Control of File Name or Path