Threats tagged 'ghsa-4rpj-w8fh-483q'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-124026Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy Medium5.32026-11-06GCVE DatabaseCVE-2026-124026 Bar Assistant versions from 6.0.0-rc1 up to but not including 6.11.0 contain an authorization vulnerability in the CocktailController::copy function. This flaw allows registered users who own a bar to bypass membership checks and copy private cocktail recipes and images from other bars by sending a crafted POST request. The issue is fixed in version 6.11.0. Report on CVE-2026-124026 Vulnerability CWE-863 #ghsa-4rpj-w8fh-483q	GCVE Database	2026-11-06

Page 1 of 1