Description (CNA)
Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows authenticated users to read other tenants' data by using placeholder table syntax in POST /api/v1/query. Attackers can submit queries with FROM {database.table} expressions, including within subqueries, to skip table allowlist and tenant filters and expose run metadata and payloads.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| triggerdotdev / trigger.dev | affected 0 before 4.7.3; unaffected 4.7.3 |
CWE
CWE-89
References
- https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-m79r-84cc-xwg9
- https://www.vulncheck.com/advisories/trigger-dev-before-4.7.3-tenant-filtering-bypass-via-query-table-placeholders
ADP enrichment
No English description supplied.
No references supplied.