Threats tagged 'ghsa-mrm7-fvcm-h52j'

1 threat

Threats tagged 'ghsa-mrm7-fvcm-h52j'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.3%	CVE-2026-111648buildadmin · Authorization Bypass Through User-Controlled Key Medium5.1EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111648 BuildAdmin versions up to 2.3.9 have an authorization bypass vulnerability that allows authenticated backend administrators with specific permissions to modify other administrators' profiles via the id parameter. This includes changing sensitive fields such as avatar, nickname, email, mobile, and motto, even for super administrators. EPSS 0.3%Vulnerability build-admin #ghsa-mrm7-fvcm-h52j	CVE Database V5	2026-10-16

Showing 1–1 of 1 result