Threats affecting pkg:github/movim/movim

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-125379movim · Insecure Direct Object Reference Low2.32026-11-09CVE Database V5CVE-2026-125379 Movim versions up to 0.35.5 have an authorization bypass vulnerability in the Post::ajaxGetPost function. Authenticated users can read restricted posts by manipulating server, node, and nodeid parameters. This allows retrieval of cached posts intended for community or contact-only access before proper XMPP authorization checks occur. Vulnerability	CVE Database V5	2026-11-09

Page 1 of 1 · 1 duplicate CVE record merged