Threats tagged 'ghsa-fp33-7f49-fwpm'

1 threat

Threats tagged 'ghsa-fp33-7f49-fwpm'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.5%	CVE-2026-94534lamp-cloud · Authorization Bypass Through User-Controlled Key High7.1EPSS 0.5%2026-09-21CVE Database V5CVE-2026-94534 lamp-cloud through 5.10.0 fails to validate user identity in PUT /anyone/baseInfo and PUT /anyone/avatar endpoints, allowing authenticated attackers to modify arbitrary user profiles. Attackers can supply target user IDs in request bodies to rewrite profile fields including nickname, ID card, sex, nation, education, work description, and avatar attachments of other users. EPSS 0.5%Vulnerability dromara #cwe-639 #ghsa-fp33-7f49-fwpm	CVE Database V5	2026-09-21

Showing 1–1 of 1 result