CVE-2026-33345 | solidtime-io solidtime up to 0.11.5 Project Detail Endpoint projects index authorization

A vulnerability marked as problematic has been reported in solidtime-io solidtime up to 0.11.5. This impacts the function index of the file /api/v1/organizations/{org}/projects/ of the component Project Detail Endpoint. This manipulation causes authorization bypass.

This vulnerability is tracked as CVE-2026-33345. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.