Threats tagged 'ghsa-j826-m6j5-hvhv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-119645ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated High7.12026-10-30GCVE DatabaseCVE-2026-119645 ZenTao PMS versions up to 22.6 have a missing authorization vulnerability in the doc::ajaxGetDoc() function. This flaw allows authenticated users with low privileges to bypass access checks and read private documents by enumerating document IDs. The vulnerability affects private documents and restricted libraries, products, projects, or team documents. Report on CVE-2026-119645 Vulnerability CWE-639 #ghsa-j826-m6j5-hvhv	GCVE Database	2026-10-30

Page 1 of 1