#cwe-639

共收录 1905 条相关情报。

漏洞预警2026-10-23 发布MEDIUM

Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_i...

CVE-2026-115725

Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access oth

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-22 发布INFO

Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of MarcosCamara01 Ecommerce Template allows any authenticated user to delete and...

CVE-2026-115453

Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of MarcosCamara01 Ecomm

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-22 发布MEDIUM

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authentica...

CVE-2026-13319

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or edit_data_management_pipeline_job capability could r...

CVE-2026-76287

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capabilit

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-21 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: fro...

CVE-2026-112868

Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured A

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-21 发布MEDIUM

Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send that allows authenticated users to post messages as other users due to an incomplete CV...

CVE-2026-114395

Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send that allows authenticated user

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-21 发布MEDIUM

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to post content attributed to other users by supplying user-controlled owne...

CVE-2026-114394

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to post content at

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-21 发布MEDIUM

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify tickets outside their groups via PUT /api/v1/tickets/:id and P...

CVE-2026-114393

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify ticke

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-21 发布MEDIUM

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets outside their groups via GET /api/v1/tickets/:uid. Attacker...

CVE-2026-114392

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets ou

来源摘录 · NVD

#cve #cwe-639

安全公告2026-10-21 发布INFO

Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay...

CVE-2026-114091

Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay route without scoping the