Threats tagged 'ghsa-7x75-7v3v-8686'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-111493MatchPoint · Lack of Authentication and Authorization High8.72026-11-06GCVE DatabaseCVE-2026-111493 The Images.ashx endpoint in MatchPoint lacks authentication and authorization controls, allowing unauthenticated remote attackers to download profile photos by enumerating predictable identifiers. This vulnerability could enable attackers to collect user photos, potentially linking them to identities when combined with other platform weaknesses. Report on CVE-2026-111493 Vulnerability CWE-306 #ghsa-7x75-7v3v-8686	GCVE Database	2026-11-06

Page 1 of 1