Threats tagged 'ghsa-wqfw-mf45-5858'

1 threat

Threats tagged 'ghsa-wqfw-mf45-5858'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-111656chatwiki · Authorization Bypass Through User-Controlled Key Medium5.3EPSS 0.2%2026-10-16CVE Database V5CVE-2026-111656 ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authenticated users to access another tenant's form filters by supplying arbitrary form_id values. Attackers can send sequential form_id values to getFormFilterList, getFormFilterInfo and updateFormFilterSort to read filter rules and overwrite another tenant's filter sort order. EPSS 0.2%Vulnerability zhimaAi #ghsa-wqfw-mf45-5858	CVE Database V5	2026-10-16

Showing 1–1 of 1 result