#cwe-1281

共收录 2 条相关情报。

← 返回所有主题

漏洞预警2026-08-12 发布INFO

Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `case 'item_delete':` in `modules/inventory.php`. The same...

CVE-2026-47233

Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `

历史摘要 · 未重新核验 · NVD

#cve #cwe-862 #cwe-1281

安全公告2026-05-29 发布INFO

Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024

CVE-2026-47233

## Summary Commit `d37ca6b27b9674238e58491cf7ba292e66898f15` ("Delete item not check admin rights #2024", 2026-04-12) a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-862 #cwe-1281 #severity:medium