Threats tagged 'ghsa-24rj-35xh-8w8p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-119644Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to Medium5.32026-10-30GCVE DatabaseCVE-2026-119644 Blossom versions through 1.17.1 have an authorization bypass vulnerability that permits authenticated users with non-readonly privileges to modify other users' pictures by using arbitrary picture IDs. This allows attackers to delete images or change their star status via specific endpoints. Report on CVE-2026-119644 Vulnerability CWE-639 #ghsa-24rj-35xh-8w8p	GCVE Database	2026-10-30

Page 1 of 1