Sendportal Core
Monthly
Authenticated workspace members in SendPortal Core through 4.0.1 can attach subscribers to tags owned by other workspaces by supplying unvalidated tag IDs through the web subscriber form or CSV import, allowing limited exposure of victim campaign content and skewing victim reports. This is a medium-severity authorization bypass (CVSS 4.0 5.3, CVSS:3.1 5.3) rather than an authentication flaw; it requires a valid account and a multi-tenant deployment with a victim workspace, and single-tenant installations have no cross-workspace target. No public exploit identified at time of analysis.
Authenticated workspace members in SendPortal Core through 4.0.1 can attach subscribers to tags owned by other workspaces by supplying unvalidated tag IDs through the web subscriber form or CSV import, allowing limited exposure of victim campaign content and skewing victim reports. This is a medium-severity authorization bypass (CVSS 4.0 5.3, CVSS:3.1 5.3) rather than an authentication flaw; it requires a valid account and a multi-tenant deployment with a victim workspace, and single-tenant installations have no cross-workspace target. No public exploit identified at time of analysis.