Threats tagged 'ghsa-q23h-4vpg-572m'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-126948Zipline before 4.5.0 contains an insecure direct object reference vulnerability caused by missing ownership High8.72026-11-13GCVE DatabaseCVE-2026-126948 Zipline versions prior to 4.5.0 have an insecure direct object reference vulnerability due to missing ownership verification in the PATCH and DELETE API handlers for user folders. Authenticated attackers can manipulate folder IDs belonging to other users to rename, make public, enable uploads, or delete those folders. Report on CVE-2026-126948 Vulnerability CWE-639 #ghsa-q23h-4vpg-572m	GCVE Database	2026-11-13

Page 1 of 1