What is GHSA-qvf2-fq2x-c529?

GHSA-qvf2-fq2x-c529 is a security advisory published by GitHub Security Advisories with High severity. Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information...

Which CVE IDs does GHSA-qvf2-fq2x-c529 cover?

GHSA-qvf2-fq2x-c529 covers the following CVE IDs: CVE-2026-92203. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qvf2-fq2x-c529?

GHSA-qvf2-fq2x-c529 has a CVSS v3 base score of 7.7, published by GitHub Security Advisories.

GHSA-qvf2-fq2x-c529HighCVSS 7.7

Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information...

Vendor

GitHub Security Advisories

Published

October 21, 2026

Last Modified

October 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-92203 →

📋 Description

Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability.

The specific flaw exists within the implementation of the _get_shared_drive_object method. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-28215.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-92203
https://www.zerodayinitiative.com/advisories/ZDI-26-703
https://github.com/advisories/GHSA-qvf2-fq2x-c529