{"id":"CVE-2026-67993","published":"2026-09-29T20:17:23.113","lastModified":"2026-09-29T20:17:23.113","description":"basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/basecamp/upright","tags":[]},{"url":"https://github.com/basecamp/upright/blob/efe4f2e5254ac6e57e45d2261804cca74dbbca3f/app/controllers/upright/sessions_controller.rb#L3","tags":[]}],"exploitRefs":[{"url":"https://github.com/basecamp/upright","tags":[]},{"url":"https://github.com/basecamp/upright/blob/efe4f2e5254ac6e57e45d2261804cca74dbbca3f/app/controllers/upright/sessions_controller.rb#L3","tags":[]}],"hasPoc":true,"ai":null}