Contributor Insecure Direct Object References (IDOR) in SiteSkite <= 2.1.7 versions. (CVE-2026-93513)
An Insecure Direct Object Reference (IDOR) vulnerability exists in SiteSkite versions up to and including 2.1.7, affecting contributor-level access. This vulnerability allows unauthorized modification of objects due to improper access control checks. The CVSS score is 4.3, indicating a medium severity issue with low complexity and requiring low privileges but no user interaction.
AI Analysis
Technical Summary
CVE-2026-93513 describes an IDOR vulnerability in SiteSkite versions up to 2.1.7. The flaw allows contributors to access or modify objects they should not be authorized to, due to improper access control on direct object references. The vulnerability has a CVSS 3.1 base score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N), indicating network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact.
Potential Impact
The vulnerability could allow an attacker with contributor-level privileges to modify data or objects they should not have access to, potentially leading to unauthorized data manipulation. There is no impact on confidentiality or availability reported.
Mitigation Recommendations
No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict contributor privileges where possible and monitor for suspicious activity related to object access.
Contributor Insecure Direct Object References (IDOR) in SiteSkite <= 2.1.7 versions. (CVE-2026-93513)
Description
An Insecure Direct Object Reference (IDOR) vulnerability exists in SiteSkite versions up to and including 2.1.7, affecting contributor-level access. This vulnerability allows unauthorized modification of objects due to improper access control checks. The CVSS score is 4.3, indicating a medium severity issue with low complexity and requiring low privileges but no user interaction.
CVSS v3.1
Score 4.3medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-93513 describes an IDOR vulnerability in SiteSkite versions up to 2.1.7. The flaw allows contributors to access or modify objects they should not be authorized to, due to improper access control on direct object references. The vulnerability has a CVSS 3.1 base score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N), indicating network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact.
Potential Impact
The vulnerability could allow an attacker with contributor-level privileges to modify data or objects they should not have access to, potentially leading to unauthorized data manipulation. There is no impact on confidentiality or availability reported.
Mitigation Recommendations
No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict contributor privileges where possible and monitor for suspicious activity related to object access.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-26gj-h59p-xwv8
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-93513"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6ab4be93f7a7c54106f0df79
Added to database: 09/24/2026, 06:09:23 UTC
Last enriched: 09/24/2026, 06:59:40 UTC
Last updated: 09/24/2026, 17:59:23 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.