#security-research

Breaking Databasement: From IDOR to RCE in a Backup Management Platform

Two high-severity vulnerabilities in Databasement v1.5.5 chain together for full server compromise via cross-tenant data exfiltration and remote code execution.