CyberRota Analysis
AI-GeneratedOpenReplay's session search and analytics API in enterprise editions with multi-tenancy enabled is vulnerable due to improper handling of user input in ClickHouse queries, allowing authenticated users to access any ClickHouse table through crafted queries. This could lead to unauthorized data exposure and disruption of session searches for all users until the compromised key is removed. Organizations using affected versions should prioritize upgrading to version 1.27.0 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenReplay is a self-hosted session replay suite. Prior to 1.27.0, the session search and analytics API in enterprise editions with multi-tenancy enabled built ClickHouse queries by inserting user input into the query string, including two positions that took input without escaping, allowing an authenticated member to read any ClickHouse table through blind boolean and time-based exfiltration and to break the project's session search for all viewers until the stored key is removed. This issue is fixed in version 1.27.0.