Threats tagged 'ghsa-m368-x5fj-4332'

1 threat

Threats tagged 'ghsa-m368-x5fj-4332'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-111610Solo · Authorization Bypass Through User-Controlled Key Medium5.3EPSS 0.2%2026-10-16CVE Database V5CVE-2026-111610 B3log Solo versions up to 4.4.0 have an authorization bypass vulnerability in the ArticleConsole component. Authenticated authors can access and manipulate other authors' articles due to missing ownership checks. This allows listing drafts of other authors, viewing draft content via a user-controlled parameter, and pushing others' articles to the Rhythm community. EPSS 0.2%Vulnerability b3log #ghsa-m368-x5fj-4332	CVE Database V5	2026-10-16

Showing 1–1 of 1 result