Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-111649paopao-ce · Authorization Bypass Through User-Controlled Key High7.1EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111649 CVE-2026-111649 is an authorization bypass vulnerability in rocboss paopao-ce versions up to 0.6.0-alpha.3. Authenticated users can exploit an insecure direct object reference in the DownloadAttachment function to access private media belonging to other users by supplying arbitrary content IDs. Attackers can enumerate sequential post_content IDs via the /v1/attachment endpoint to obtain signed download URLs for private, friend-only, and following-only images, videos, and attachments. EPSS 0.3%Vulnerability rocboss #ghsa-x97c-6hxr-5qp6	CVE Database V5	2026-10-16

Showing 1–1 of 1 result