Threats tagged 'ghsa-fmgm-gh7c-hwv2'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-18749CERT/CC VINCE · Insecure Direct Object Reference Critical9.8EPSS 0.5%2026-08-12CVE Database V5CVE-2026-18749 The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has (or is sent) its uuid — leaks not-yet-released coordinator material to vendors on the case. EPSS 0.5%Vulnerability CWE-639 #ghsa-fmgm-gh7c-hwv2	CVE Database V5	2026-08-12

Page 1 of 1