Vulnerability · Published Oct 16, 2026 · Assigned by VulnCheck

CVE-2026-111614DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials

Medium 6.5

In plain English

A medium-severity authorization bypass via user-controlled key in DataCap from devlive-community. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.4%top 67.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source, snippet and dashboard endpoints to retrieve serialized datasource host, port, username and cleartext passwords.

Affected products (as reported)

Vendor	Product	Versions
devlive-community	DataCap	0 – through 2025.1.1

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://hackmd.io/@hieuPenguinnn/metaforge-datacap-source-getbyid-cross-user-idor third-party-advisory
https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-service/src/main/java/io/edurt/datacap/service/service/BaseService.java#L38-L43 technical-description
https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-server/src/main/java/io/edurt/datacap/server/controller/BaseController.java#L91-L95 technical-description
VulnCheck Advisory: DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials third-party-advisory