Threats Tagged 'ghsa-43vg-7p43-j62w'

1 threat

Threats Tagged 'ghsa-43vg-7p43-j62w'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2026-105046Xperience · Forced Browsing Medium4.3EPSS 0.2%2026-10-02CVE Database V5CVE-2026-105046 Kentico Xperience 13 versions prior to 13.0.216 have a vulnerability due to missing object-level authorization checks on administration API endpoints. This flaw allows users with limited privileges to perform direct requests that bypass intended access controls. The vulnerability is classified as CWE-425 (Direct Request or Forced Browsing). EPSS 0.2%Vulnerability Kentico #cwe-425 #ghsa-43vg-7p43-j62w	CVE Database V5	2026-10-02

Showing 1–1 of 1 result