Threats tagged 'ghsa-33xm-96fg-7hfc'

1 threat

Threats tagged 'ghsa-33xm-96fg-7hfc'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.6	EPSS 0.2%	CVE-2026-108110MOVO · Authorization Bypass Through User-Controlled Key High7.6EPSS 0.2%2026-10-09CVE Database V5CVE-2026-108110 MOVO versions 0.1.0 through 0.2.3 contain an authorization bypass vulnerability in the chat-api document endpoints. Authenticated users can exploit this flaw by supplying arbitrary object paths to access or overwrite other users' private documents and presentation blueprints. This vulnerability allows reading and modification of sensitive data without proper authorization. EPSS 0.2%Vulnerability himovo #ghsa-33xm-96fg-7hfc	CVE Database V5	2026-10-09

Showing 1–1 of 1 result