CVE-2026-63307

Name of the Vulnerable Software and Affected Versions Chat2DB versions prior to 5.3.0

Description An insecure direct object reference occurs when the application provides direct access to objects based on user-supplied input. In the 'GET /api/connection/datasource/{id}' endpoint, the handler calls the dataSourceService.queryExistent(id, ...) function without verifying if the requesting user owns the resource. This allows any authenticated non-admin user to enumerate datasource IDs and retrieve plaintext database credentials of datasources belonging to other users.

Recommendations Update to version 5.3.0 or later. Restrict access to the 'GET /api/connection/datasource/{id}' endpoint to prevent unauthorized credential retrieval.