SingleStore Program Statistics

View program

10 total issues disclosed

$0 total paid publicly

Most disclosed (4 disclosures) — Business Logic Errors

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the server Missing Authorization bisht-ji High 2026-07-13
Exceeding the maximum number of spaces allowed by exploiting a Race Condition in the Workspace creation process Business Logic Errors bl4ck- Low 2026-07-01
Insecure Direct Object Reference (IDOR) allows creating folders. Insecure Direct Object Reference (IDOR) bl4ck- Low 2026-07-01
Delete any folder for any user within the organization Insecure Direct Object Reference (IDOR) bl4ck- Low 2026-07-01
Privilege Escalation – Access to the Alert Subscribers page for users with low privileges Privilege Escalation bl4ck- Low 2026-07-01
Insufficient checks in the file path parameter allow writing to unauthorized directories External Control of File Name or Path axolot23 Low 2026-06-24
2FA bypass possible on https://authsvc.singlestore.com Authentication Bypass axolot23 Medium 2025-10-22
Exceeding the limit of Workspaces via Race Condition Business Logic Errors bl4ck- Medium 2025-10-06
Exceed the maximum number of subscribers using Race Condition Business Logic Errors bl4ck- Low 2025-08-12
IDOR - Scheduled data leak to other accounts By "projectID" Business Logic Errors bl4ck- Medium 2025-08-12