Vulnerability Description
FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, a query-construction flaw in client list endpoints allowed authenticated clients to bypass tenant scoping and retrieve other clients’ data. Details In ServiceTransaction::getSearchQuery() and Order\Service::getSearchQuery(), OR-based search/action filters were appended without grouping, allowing SQL operator precedence to evaluate OR clauses independently of the enforced client_id constraint. Crafted requests could therefore return records and metadata belonging to other clients, including identifiers, amounts, status, timestamps, and related fields. This issue was fixed in version 0.8.0.
Related Weaknesses (CWE)
References
- https://github.com/FOSSBilling/FOSSBilling/releases/tag/0.8.0
- https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-xcrv-cccw-r6
FAQ
What is CVE-2026-23513?
CVE-2026-23513 is a documented vulnerability. FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, a query-construction flaw in client list endpoints allowed authenticated clients to bypass tenant ...
How severe is CVE-2026-23513?
CVSS scoring is not yet available for CVE-2026-23513. Check NVD for updates.
Is there a patch for CVE-2026-23513?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.