Unauthorized access to data [SOLVED]

Hi InfluxDB team,

I would like to report a small vulnerability on InfluxDB where a user is allowed to get some data from another database even without permission. This vulnerability is locally and remotely exploitable.

I know there is a GitHub repo to report this kind of issue but before going public with this information, I want to make sure the InfluxDB team is aware about it first.


Fernando Machado

Update Oct, 09: someone from the InfluxDB team is handling this issue. I’m updating it as [SOLVED].