CVE-2023-37749

Published: Oct 27, 2025

Modified: Oct 27, 2025

PUBLISHED

Description

Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://app.hubspot.com/api/external-options/v2/pagedFetch/0-1/OWNER?useIndexOffset=true&portalId=22152277&clienttimeout=14000&hs_static_app=settings-ui-users&hs_static_app_version=1.43001&limit=200&q=&offset=0&includeDeleted=true

https://owasp.org/Top10/A01_2021-Broken_Access_Control/

https://gist.github.com/0xDBJ/28072f7eea42571d5b4ebaabdcb21cce

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-37749

Description

Affected Products

References