CVE-2020-5289

In Elide before 4.5.14, it is possible for an adversary to "guess and check" the value of a model field they do not have access to assuming they can read at least one other field in the model. The adversary can construct filter expressions for an inaccessible field to filter a collection. The presence or absence of models in the returned collection can be used to reconstruct the value of the inaccessible field. Resolved in Elide 4.5.14 and greater.

• CWE-285
• CWE-552

• https://github.com/yahoo/elide/pull/1236Patch, Third Party Advisory
• https://github.com/yahoo/elide/pull/1236/commits/a985f0f9c448aabe70bc904337096399de4576dcPatch
• https://github.com/yahoo/elide/security/advisories/GHSA-2mxr-89gf-rc4vThird Party Advisory
• https://github.com/yahoo/elide/pull/1236Patch, Third Party Advisory
• https://github.com/yahoo/elide/pull/1236/commits/a985f0f9c448aabe70bc904337096399de4576dcPatch
• https://github.com/yahoo/elide/security/advisories/GHSA-2mxr-89gf-rc4vThird Party Advisory

Published

Mar 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5283ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerabil…3.5
• CVE-2020-5284Next.js versions before 9.3.2 have a directory traversal vul…4.3
• CVE-2020-5285In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is…6.1
• CVE-2020-5286In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is…6.1
• CVE-2020-5287In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is…6.5
• CVE-2020-5288"In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there i…6.5
• CVE-2020-5290In RedpwnCTF before version 2.3, there is a session fixation…6.5
• CVE-2020-5291Bubblewrap (bwrap) before version 0.4.1, if installed in set…7.8
• CVE-2020-5292Leantime before versions 2.0.15 and 2.1-beta3 has a SQL Inje…8.8
• CVE-2020-5293In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there ar…6.5
• CVE-2020-5294PrestaShop module ps_facetedsearch versions before 2.1.0 has…5.4
• CVE-2020-5295In OctoberCMS (october/october composer package) versions fr…4.9