云虫漏洞情报

CVE-2026-77145 - The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers. - 漏洞详情

漏洞编号:CVE-2026-77145

风险等级:未知

漏洞来源:CVE

CVE 编号:CVE-2026-77145

CNNVD 编号:-

厂商/产品:- / -

影响范围:-

CWE:CWE-639

发布/更新时间:2026-08-25 / 2026-08-27

漏洞描述

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers.

相关链接

相关漏洞

« 返回首页