Threats tagged 'ghsa-2qg4-97v5-72x5'

1 threat

Threats tagged 'ghsa-2qg4-97v5-72x5'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.5%	CVE-2026-92801cc-connect · Incorrect Authorization High8.7EPSS 0.5%2026-09-16CVE Database V5CVE-2026-92801 CVE-2026-92801 is a high-severity vulnerability in chenhg5 cc-connect up to version 1.5.0. The flaw involves incorrect authorization where the onCardAction handler for Feishu interactive card callbacks does not enforce per-user allowlist filtering. This allows attackers to dispatch agent commands by triggering card actions in admitted chats, bypassing intended per-user access controls. EPSS 0.5%Vulnerability chenhg5 #ghsa-2qg4-97v5-72x5	CVE Database V5	2026-09-16

Showing 1–1 of 1 result