CVE-2023-37749

Description

Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization.

PUBLISHED Reserved 2023-07-10 | Published 2025-10-27 | Updated 2025-10-27 | Assigner mitre

References

app.hubspot.com/...limit=200&q=&offset=0&includeDeleted=true

owasp.org/Top10/A01_2021-Broken_Access_Control/

gist.github.com/0xDBJ/28072f7eea42571d5b4ebaabdcb21cce

cve.org (CVE-2023-37749)

nvd.nist.gov (CVE-2023-37749)

Download JSON