Threats tagged 'ghsa-fvq5-h5xm-rp92'

CVE-2026-108046 is a Direct Object Reference (IDOR) vulnerability in Alosuite caused by insufficient authorization checks on the '/Companies/Edit/{id}' endpoint. This flaw allows unauthenticated remote attackers to modify object identifiers to access information belonging to other companies or users without proper authorization. The vulnerability enables enumeration of valid object IDs and unauthorized disclosure of application data.