Threats tagged 'ghsa-73cc-wjfh-7vgp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-63164Omnispace Agora Project through 26.10.0 contains an insecure direct object reference vulnerability that allows High7.12026-11-13GCVE DatabaseCVE-2026-63164 Omnispace Agora Project versions through 26.10.0 have an insecure direct object reference (IDOR) vulnerability. Authenticated attackers can exploit this flaw by manipulating the reloadMailTypeId parameter in the CtrlMail.php component to access private mail messages of other users without proper ownership checks. This leads to unauthorized disclosure of sensitive communication content. Report on CVE-2026-63164 Vulnerability CWE-639 #ghsa-73cc-wjfh-7vgp	GCVE Database	2026-11-13

Page 1 of 1