Threats tagged 'ghsa-9hmf-cxg8-mqx6'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.5%	CVE-2026-92752metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged High8.3EPSS 0.5%2026-09-16GCVE DatabaseCVE-2026-92752 The metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints improperly enforce access control by only verifying that callers are logged in, without checking record-level permissions. This allows attackers with valid login credentials to enumerate sequential document identifiers and read, replace, or delete attachments and comments on records they should not have access to. EPSS 0.5%Vulnerability CWE-639 #ghsa-9hmf-cxg8-mqx6	GCVE Database	2026-09-16

Page 1 of 1