Revoked short-tokens in Nginx UI prior to 2.4.1 can be replayed to regain authenticated access to HTTP and WebSocket routes that accept short-token authentication, because token deletion fails to invalidate the corresponding short_token cache entry. Exploitation is authenticated and tightly conditioned: the attacker must already hold a previously issued short token (CVSS PR:L), the account must be disabled and then re-enabled before the stale cache entry expires, and the surviving cache record is then resolved by GetTokenUserByShortToken - a timing-dependent, opportunistic flaw rather than a reliably reproducible one. There is no public exploit identified at time of analysis and no evidence of confirmed active exploitation (no CISA KEV listing); the vendor-released patch is Nginx UI 2.4.1.
Remote code execution in Thelia 2.6.0 and earlier is achievable by an authenticated back-office administrator who uses the module ZIP upload-and-install feature to deliver a crafted module whose install() method contains embedded PHP; that code is executed on installation with the privileges of the web server. The affected scope is Thelia up to and including 2.6.0, and exploitation requires the highest application privilege level (an administrator account), which is why the independent assessment rates real-world priority as LOW despite high confidentiality, integrity, and availability impact on the host. There is no public exploit identified at time of analysis, no CISA KEV listing, and EPSS is only 0.19% (8th percentile), so this is best treated as an insider/misconfiguration-adjacent hardening issue rather than an urgent internet-facing threat.
Cross-site scripting in IBM Planning Analytics 2.0 and 2.1 allows remote attackers to execute arbitrary JavaScript in a victim's browser session by supplying content that is rendered without proper output encoding. Per the supplied CVSS vector (AV:N/AC:L/UI:R/S:U/C:L/I:L/A:N, base 5.4), exploitation requires the victim to interact with or load the attacker-influenced page, and impact is confined to that user's browser context rather than the underlying host or other accounts. No public exploit identified at time of analysis, and no exploitation activity is recorded in CISA KEV; patch available per vendor advisory. Note that the vector's PR:N conflicts with IBM's description of a 'remote authenticated attacker', so authentication requirements are not confirmed from available data and should be verified against IBM support node 7291604.
Authenticated users with only low privileges (for example a WordPress subscriber or registered WooCommerce customer) can reach at least one TMDS dropshipping plugin action that performs no authorization check, allowing them to make unauthorized state changes against a WordPress site running TMDS 1.0.15 or earlier. The vendor-assigned CVSS of 5.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) reflects limited integrity and availability impact with no confidentiality loss, and exploitation requires a valid low-privilege account, so the practical risk is moderate rather than critical. No public exploit code or confirmed in-the-wild exploitation was identified at time of analysis, and no EPSS or CISA KEV data was supplied; only a Patchstack advisory (credited as the reporting source) documents the issue.
Duplicate customer-identity records can be created in OTRS whenever more than one CustomerUser backend is configured (for example a database backend alongside LDAP), because the email-address uniqueness check is applied only within the backend selected at the time of creation rather than across all backends. An authenticated operator holding the permission to create or modify customer users (PR:L per CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, base score 5.4) can therefore register an address already assigned to a customer in another backend, after which ticket records or outgoing email may be associated with, or exposed to, the wrong customer identity. Exploitability is narrowed by two prerequisites - a non-default multi-backend CustomerUser configuration and a privileged customer-user management role - so this is a genuine but moderate-priority integrity and information-exposure issue rather than an urgent emergency; no public exploit identified at time of analysis and no CISA KEV listing.
Broken access control (CWE-863) in Foreman's domain and subnet interface API lets an authenticated user who already holds a host-view permission and can see a shared domain or subnet read interface records for hosts outside their authorized scope; the API checks the host permission but omits its search-limit filter, returning every interface on the domain or subnet. A user who also holds host-edit permission can persist a change to one of those out-of-scope interfaces, giving limited confidentiality and integrity impact (CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N). Red Hat Satellite 6, which ships Foreman, is the affected product per CPE; no public exploit identified at time of analysis.
Stored cross-site scripting in IBM Planning Analytics 2.0 and 2.1 allows an authenticated user holding a valid account on the Web UI to persist arbitrary JavaScript into a stored field, which then executes in the browser of any other user who views that content - potentially disclosing credentials or session data within a trusted session. Per the assessed vector (CVSS 6.4, AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N), exploitation requires both the attacker's existing authenticated access and a second victim user viewing the affected page, and impact is bounded to low confidentiality and integrity within the browser session rather than server-side code execution or availability loss. There is no public exploit code, no CISA KEV listing, and no EPSS score in the available intelligence, so the flaw rates as 'no public exploit identified at time of analysis'.
HTTP response splitting in Progress MarkLogic Server affects the Query Console file-exploration endpoint in 12.x releases before 12.1.0 and 11.x releases before 11.3.7, where insufficient input sanitization permits CR/LF injection into generated HTTP responses. Exploitation requires an authenticated Query Console session (CVSS PR:L) and a victim to trigger the attacker-influenced request (UI:R), so it is not a fully automated remote attack; the impact is a scope-changed, low-severity client-side response manipulation with limited confidentiality and integrity effects and no availability impact, consistent with a CVSS 3.1 base score of 5.4. No public exploit code and no confirmed active exploitation were identified at time of analysis, and no EPSS score was supplied with the source data.
Low-privilege authenticated users can bypass access-control checks in the WordPress 'Event post' plugin (versions from initial release through 6.1.1), allowing them to perform event-management actions and read or modify event data they are not authorized to touch. The flaw is a CWE-862 missing authorization issue scored CVSS 5.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), so exploitation requires an existing account on the target site at subscriber/contributor-level privilege or higher - unauthenticated visitors cannot trigger it directly, though self-registration or any low-privilege account lowers the bar. There is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis; impact is limited to partial confidentiality and integrity of event data with no availability effect.
Missing authorization in the WordPress plugin VideoWhisper Site Manager for ChatGPT, Claude, Codex (all versions through 1.2.10) lets an authenticated low-privilege site user reach plugin functionality that should require higher capabilities, resulting in limited confidentiality and integrity impact at CVSS 5.4. The flaw is a broken access control condition (CWE-862) requiring only a valid WordPress account on a site with the plugin active (PR:L), remote reachability and low attack complexity with no user interaction; availability is unaffected. No public exploit code was identified at time of analysis, and this does not by itself permit full site takeover or denial of service.
Cross-site request forgery in OTRS 7.0.X, 8.0.X, 2023.X through 2026.X before 2026.7.X lets an unauthenticated remote attacker induce a logged-in administrator to delete Import/Export templates through the AdminImportExport::TemplateDelete action, which fails to validate the ChallengeToken. The issue is moderate severity (CVSS 5.4, CWE-352) because exploitation requires an active administrator session and user interaction, yields no code execution or data disclosure, and matters only where the Import/Export template feature is in use; no public exploit has been identified at time of analysis.
Missing authorization in the RocketGeek WP-Members WordPress plugin through version 3.5.7 permits authenticated low-privilege users-such as self-registered members-to bypass incorrectly configured access-control security levels, resulting in limited confidentiality and integrity impact. Rated CVSS 5.4 (CWE-862), the flaw requires a valid low-privilege account that is readily obtainable on sites with open registration, and its effect is amplified when membership security levels are misconfigured. No public exploit or active exploitation is identified in the provided intelligence.
Missing authorization in the Arraytics Booktics WordPress plugin (versions through 1.0.28) lets an authenticated low-privilege user - such as a subscriber or customer - invoke plugin functionality that should be reserved for higher-privileged roles, resulting in limited unauthorized data disclosure and modification. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, score 5.4) confirms the attack is network-reachable and requires no user interaction, but an account on the target site is a hard prerequisite, and there is no availability impact. No public exploit code has been identified at time of analysis, and this is assessed as a moderate, not high-priority, issue.
Authorization bypass in Kirby CMS affects versions up to 4.9.5 and up to 5.5.3, allowing an authenticated user with only low-level privileges to retrieve data through the Dynamic Option Generation feature that they should not be permitted to see. The flaw sits in OptionsQuery::resolve (src/Option/OptionsQuery.php) and is classified as an authorization bypass through a user-controlled key (CWE-639); per the independent assessment the impact is confidentiality-only, with no integrity or availability effect, and exploitation requires a valid authenticated session (CVSS PR:L) rather than an anonymous visitor. The EPSS signal and CISA KEV status are not provided, and no public exploit code was identified at time of analysis; vendor fixes are available in 4.9.6 and 5.6.0.
Denial of service in the openstack-network-exporter HTTP metrics server, as shipped in Red Hat OpenStack Platform 18.0, allows an unauthenticated remote attacker to open many slow HTTP header connections and exhaust server file descriptors, preventing legitimate Prometheus metric scraping and alerting. The component is deployed without a ReadHeaderTimeout or comparable connection timeouts, so any network-reachable instance is affected with no credentials or user interaction required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, 5.3). There is no public exploit identified at time of analysis and no evidence of active exploitation; impact is limited to monitoring availability and does not touch the OpenStack data plane, making this a modest availability issue best handled through routine hardening and network segmentation.
Path traversal in copyparty before 1.20.19 allows a low-privileged authenticated FTP/FTPS user to create a new file outside configured volumes when FTP or FTPS is explicitly enabled. Exploitation requires the non-default FTP/FTPS configuration and a valid low-privileged account; the attacker cannot read or overwrite existing files, the output name receives a randomized suffix, and copyparty does not execute the dropped file, so broader impact depends on unrelated host software processing it. No public exploit was identified at time of analysis, and the issue is fixed in 1.20.19.
Authenticated users of Open WebUI 0.11.0 through 0.11.3 can stall server workers by getting the model to call the grep_knowledge_files or grep_chat_files file-search tools with a catastrophically backtracking regular expression, which blocks the async event loop for roughly two seconds on each repeated invocation. Exploitation requires a valid account with access to those tools (CVSS PR:L), so unauthenticated attackers cannot trigger it directly; the practical exposure is highest on multi-tenant, shared-account, or self-service-registration instances where untrusted users already hold logins. There is no public exploit identified at time of analysis, and the effect is transient availability degradation that must be sustained by repeated calls rather than a one-shot outage (CVSS 4.0 base 7.1; CVSS 3.1 A:H with no confidentiality or integrity impact).
Unauthenticated access to the OTRS Agent Frontend configuration endpoint lets any remote user who can reach the web interface retrieve internal application configuration metadata - frontend routes and their authorization groups, authentication configuration, enabled product features, and third-party integration settings. The flaw affects OTRS 8.0.X, 2023.X, 2024.X, 2025.X, and 2026.X before 2026.7.X, requires no credentials or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, 5.3), and is exposed by default on any reachable Agent Frontend. No public exploit code has been identified at time of analysis and the vendor has released a fix in the 2026.7.X branch; the practical risk is reconnaissance-grade - the leaked data contains no user credentials and cannot be used to modify configuration, but it materially aids fingerprinting and attack preparation, especially for internet-facing instances.
Brute-force credential guessing against IBM i authentication interfaces can let remote attackers recover valid user credentials, because the platform fails to sufficiently restrict repeated authentication attempts. IBM i releases 7.3, 7.4, 7.5, and 7.6 are affected, and exploitation is unauthenticated (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, base score 5.3), requiring only network reachability to an exposed sign-on endpoint and an account whose password is weak enough to be guessed. This is a moderate-severity weakness rather than a remote code execution or integrity-impacting flaw; no public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, though any organization exposing IBM i authentication services to untrusted networks should prioritize the vendor fix and tighten lockout and rate-limiting controls.
SurrealDB 3.0.0 through 3.2.x allows low-privileged authenticated attackers (or those with leaked grant identifiers) to invalidate other users' refresh tokens via the revoke RPC method without proof of possession, forcing targeted re-authentication and session denial. The flaw stems from missing authentication in the revoke RPC, and exploitation requires either VIEWER permission to run ACCESS SHOW ALL for harvesting grant IDs or previously leaked tokens. Rated medium severity (CVSS 4.0 base 5.3), impact is bounded to session invalidation with no data disclosure, code execution, or privilege escalation; no public exploit identified at time of analysis.
Path traversal in LibreNMS's nfsen_channel_common.inc.php allows an authenticated user who already has authorized access to at least one NFSen-enabled device to read RRD traffic and NetFlow graph data belonging to devices outside their permitted scope by injecting ../ sequences into the channel parameter supplied to graph.php. The flaw affects LibreNMS releases prior to 26.9.0 and is rated moderate (CVSS 4.0 base 5.3; assessed CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N), because it requires a valid low-privileged account plus an NFSen-enabled deployment and yields only read access with no integrity or availability impact. No public exploit code identified at time of analysis, and the issue is not listed under confirmed actively exploited (CISA KEV); single-tenant installations where the authenticated user is already entitled to every device gain nothing from the technique.
Authenticated users on Open WebUI instances running versions earlier than 0.11.4 can bypass administrator-imposed restrictions and reach model provider backends that have been explicitly disabled, by supplying an explicit backend index as a path segment or query parameter on the Ollama and OpenAI-compatible model listing routes. The issue is an IDOR/missing-authorization flaw (CWE-639) that discloses backend version strings, enumerates configured connections, and causes server-side requests to carry previously stored API keys - although the keys are used in outbound calls rather than necessarily returned in plaintext, and there is no integrity or availability impact. It is a medium-severity information-disclosure issue (CVSS 4.0 base 5.3; assessed CVSS 3.1 5.3) requiring a valid account (PR:L) plus at least one configured backend, and no public exploit code has been identified at time of analysis.
Missing authorization checks in ERPNext's whitelisted batch lookup methods let any authenticated user - including a low-privilege Customer portal account - enumerate every item batch together with its per-warehouse stock quantities, exposing inventory levels that should require Batch read access. The flaw spans versions 9.0.0 through 16.50.0 and is reachable over the network through the Frappe API (CVSS 4.0 base 5.3; independent assessment CVSS 3.1 5.3, AV:N/AC:L/PR:L/UI:N, confidentiality-only). There is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, so this is a moderate information-disclosure issue rather than an emergency; an upstream fix commit has been published.
Authenticated portal users in ERPNext 15.55.0 through 16.50.0 can read timesheet metadata - such as timesheet names, status, time-log dates and last-modified information - for projects they should not have visibility into, because the get_timesheet_html routine enforced only Project read access and ignored both the hide_timesheets flag and project membership. An attacker needs a valid customer/project portal login with read access to the target Project; no anonymous access is possible, and the leak is limited to metadata rather than full timesheet contents (CVSS 4.0 base 5.3, our assessment CVSS 3.1 5.3, C:L only with no integrity or availability impact). Exploitation status is low-urgency: no public exploit code identified at time of analysis and the issue is not listed in CISA KEV; an upstream fix exists in the ERPNext repository via commit eb217deef7bd407d34254aee3b3e175e4d357c90 (PR #60280), though a tagged patched release has not been independently confirmed.
CPU exhaustion in the Gitoxide gix-mailmap crate before 0.35.0 lets a repository carrying a crafted .mailmap file drive quadratic-time parsing inside Snapshot::from_bytes, tying up a worker process for minutes. The trigger is a .mailmap whose entries are ordered in descending fashion, which forces repeated front insertions during parsing; exploitation requires a victim or automated worker to run a mailmap-consuming Gitoxide operation such as git log, blame, or shortlog against the attacker-influenced repository, so the practical barrier is that passive user interaction rather than authentication (CVSS:4.0/AV:N/AC:L/PR:N/UI:P and the assessed CVSS:3.1/AV:N/AC:L/PR:N/UI:R). Impact is limited to a temporary availability loss - no code execution, data exposure, or persistence - and no public exploit has been identified at time of analysis.
Disabled accounts in Grav API plugin versions before 1.0.36 can continue to access API endpoints because SessionAuthenticator fails to re-validate account state on subsequent requests. Affected are authenticated users who hold a still-valid browser session or remember-me token obtained prior to account disabling, allowing them to bypass operator revocation until the session expires. No public exploit identified at time of analysis, and exploitation requires a pre-existing valid session, limiting the risk to moderate severity.
Server-side request forgery in SPIP before 4.4.18 lets an authenticated user with access to remote-fetching features (such as syndicated site feeds or remote document imports) force the CMS to retrieve internal or link-local resources, including cloud metadata endpoints like 169.254.169.254. The root cause is that recuperer_url() in ecrire/inc/distant.php follows up to 10 HTTP redirects without re-invoking valider_url_distante(), so a benign external URL that passes validation can redirect to a target that would otherwise be blocked. Exploitation requires valid credentials (CVSS:4.0 PR:L) and attacker-controlled or attacker-influenced external hosting; impact is confidentiality-only and read-oriented, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Field-level SELECT permission bypass in SurrealDB versions before 3.3.0 allows an authenticated record-level user to infer values of fields they are not permitted to read by registering LIVE SELECT queries whose WHERE clauses reference $before or $after record state and observing whether CREATE, UPDATE, or DELETE notifications are delivered. Because the notification stream acts as a boolean oracle, an attacker can iteratively narrow restricted field values with repeated crafted predicates; the impact is limited to confidentiality of permission-protected fields, with no write, delete, or availability effect, and no public exploit identified at time of analysis. The issue is confirmed fixed in SurrealDB 3.3.0.
User profile enumeration in IBM i 7.3, 7.4, 7.5, and 7.6 allows unauthenticated remote attackers to determine which user profiles exist by observing distinct error codes returned during the sign-on process. The issue requires only network reachability to an exposed IBM i sign-on interface - no credentials and no user interaction (CVSS 3.1 base 5.3, AV:N/AC:L/PR:N/UI:N, C:L only) - and yields nothing beyond confirmation of valid profile names, so it is a reconnaissance weakness rather than a compromise vector. No public exploit code has been identified at time of analysis, the vulnerability is not listed in CISA KEV, and IBM has published a fix.
SurrealDB versions 3.1.0 before 3.3.0 contain an authorization bypass (CWE-862) that allows an authenticated user with delete permission on a referenced table to delete protected graph edges. When a record with a REFERENCE ON DELETE CASCADE relationship is deleted, the cascade cleanup disables permission checks for the edge table, erasing edges despite the edge table's PERMISSIONS FOR delete clause. The vulnerability requires authentication and pre-existing delete authorization on the referenced parent record, so it is not anonymously reachable; exploitation enables low integrity and availability impact only, with no confidentiality exposure. No public exploit code has been identified at time of analysis.
Information disclosure in SurrealDB before 3.3.0 allows an authenticated record user to read fields that field-level SELECT permissions are meant to hide, by projecting a restricted field from the unreduced $after or $before parameters of a LIVE SELECT query under an alias. The exact stored value is then delivered inside CREATE, UPDATE, or DELETE live notifications, producing a read-only confidentiality leak scoped to records the user can already observe. Exploitation requires valid record-user credentials (PR:L, authenticated) and a deployment that actually relies on field-level SELECT permissions for secrecy; only versions before 3.3.0 are affected, and no public exploit identified at time of analysis. This is a medium-severity, confidentiality-only issue, not a high-priority emergency.
Open WebUI versions 0.9.6 through 0.11.3 allow an authenticated user who holds read access to any single knowledge base to probe the file-listing endpoint GET /api/v1/knowledge/{id}/files with a directory UUID belonging to a different knowledge base, and the response breadcrumbs disclose folder names, owner user IDs and knowledge base IDs for that directory and all of its ancestors. The flaw is an authenticated tenant-to-tenant metadata leak (CVSS 3.1 base 5.3, AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) - credentials are mandatory, file contents are not exposed, and the attack requires possession of a valid foreign directory UUID, which the advisory characterizes as a previously retained identifier rather than a guessable or sequential value. No public exploit code or active exploitation has been identified at time of analysis, and the primary remediation is upgrading to 0.11.4 or later.
Missing authorization enforcement in SnapOtter 1.15.10 through 2.2.0 lets any holder of a valid API key - including one scoped only to settings:read - call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers, staging arbitrary files outside their storage quota and feeding crafted bytes to the image and video decoders (Sharp, libheif, LibRaw, FFmpeg) behind the tool workflow. Because staged content is subsequently served by /api/v1/download without authentication, a low-privilege authenticated foothold is converted into unauthenticated file hosting and an expanded decoder attack surface. Exploitation requires a valid key but no file or tool permission; no public exploit code has been identified at time of analysis, and the issue is rated moderate (CVSS 3.1 5.3, PR:L), consistent with confirmed integrity and availability impact but no confidentiality impact.
Authorization bypass in ZKTeco BioTime 9.5.6 Build 20260130.3206 allows an authenticated low-privilege user to read personnel records outside their authorization scope through the Employee REST API at /personnel/api/employees/. Exploitation requires a valid session (CVSS PR:L) and network reachability to the BioTime web/REST interface, and the resulting impact is confined to confidentiality of employee data (VC:L) with no integrity or availability effect. No public exploit code has been identified at time of analysis, no EPSS or CISA KEV data was provided, and the vendor was contacted about the disclosure but did not respond, so no vendor-released patch is identified at time of analysis.
Authorization bypass in ZKTeco BioTime 9.5.6 Build 20260130.3206 lets an authenticated low-privilege user read biometric records belonging to other employees by manipulating the emp_code argument on the /iclock/finger_data/ Biometric Data Endpoint. Impact is confined to confidentiality of biometric data (assessed CVSS 3.1 5.3, PR:L, C:L, no integrity or availability effect) and requires the BioTime web interface to be network-reachable; no public exploit code identified at time of analysis, the issue is not confirmed actively exploited (CISA KEV), and the risk is assessed as genuine but moderate rather than an urgent priority. The vendor was contacted early about the disclosure and did not respond, so no fixed build is known.
Improper session revocation in Open WebUI 0.8.8 through 0.11.4 allows an authenticated user whose account has been deactivated to continue executing terminal commands and reading or writing files on the terminal server through an already-established terminal WebSocket. The terminal proxy route in terminals.py validates access only on the first WebSocket message and never re-checks it, so the deactivated session persists until the socket is closed; the attacker cannot open a new session after deactivation, and PR:L in the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) confirms prior valid access to the terminal feature is required. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV, making this a moderate privilege-persistence flaw rather than a high-impact remote code execution issue.
Missing authorization in the Codection 'Products Restricted Users for WooCommerce' WordPress plugin, version 0.7 and earlier, allows unauthenticated remote attackers to bypass the plugin's access-control logic and alter which products are restricted. Per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no credentials or user interaction are required against a default installation, although the impact is limited to low integrity (C:N/I:L/A:N) on plugin-controlled restriction state rather than data disclosure or denial of service. No public exploit code was identified at time of analysis, and the plugin has a narrow deployment footprint, so this is a moderate rather than high priority finding.
Stored cross-site scripting in zofe/rapyd-admin (Rapyd Admin) 9.4.0 before 9.20.0 lets an unauthenticated attacker who can self-register pick a display name containing HTML/JavaScript, which the x-rpd::select-list Blade component renders unescaped and which then executes in a privileged administrator's browser session - specifically when the admin opens Logs → Activity (Author filter) or the users and permissions forms. The CVSS vector confirms PR:N (no authentication) but UI:P/UI:R, so exploitation depends on open self-service registration plus an administrator viewing the affected screen; impact is confined to the admin's browser session, consistent with the assessed CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. There is no public exploit identified at time of analysis and the flaw is not in CISA KEV; the vendor addressed it in 9.20.0 by escaping the option labels and rejecting names containing '<' or '>'.
Cross-site request forgery in yangzongzhuan RuoYi 4.8.3 lets a remote, unauthenticated attacker cause a logged-in privileged user to unknowingly trigger state-changing actions - according to the referenced public security report, a GET-based delete operation that lacks anti-CSRF token validation. Impact is limited to actions the victim is already authorized to perform (CVSS 4.0 base 5.3, low integrity impact only), and exploitation hinges on the victim holding an active authenticated session at the moment they load attacker-controlled content. The vendor was contacted early but did not respond, no vendor-released patch has been identified, and no public exploit code was identified at time of analysis, though the GitHub security report describing the vulnerable GET-based delete endpoint is publicly available.
Improper authorization in Open WebUI 0.11.0 through 0.11.3 allows an authenticated user who is a member of a shared folder to insert attacker-controlled chats into that folder by calling POST /api/v1/chats/{id}/fork on chats they created there while they still held write access, even after being downgraded to read-only. The endpoint places the forked chat in the source chat's folder without re-checking the caller's current write permission on that folder (CWE-862), so the injected content becomes visible to the folder owner and other members. Exploitation is not opportunistic: it requires a valid account, a non-default multi-member shared folder, and the specific stateful precondition that the attacker's own chats were created before the downgrade; impact is confined to integrity (content insertion) with no disclosure or availability effect, and no public exploit code has been identified at time of analysis.
Authorization bypass in Open WebUI 0.11.1 through 0.11.3 allows an authenticated user with a linked OAuth account to retain their previous role after their identity provider role is downgraded or revoked, provided the provider sends role claims only in the ID token and not in the userinfo response. The vulnerability resides in the OAuth token exchange endpoint, which does not demote the user's existing role when no roles claim is found in userinfo. No public exploit has been identified, and impact is limited to retaining an already-held role rather than gaining new privileges.
Insecure direct object reference in QloApps through 1.7.0 lets an authenticated, hotel-restricted back-office employee manipulate sequential identifiers to act on resources belonging to other hotels - reading, uploading and deleting booking documents, deleting rooms, room images, room-type product images and hotel images. The flaw is exploitable only in multi-hotel installations that actually use per-hotel scoping via htl_access, and only by a user who already holds a valid low-privilege back-office account (CVSS vector PR:L, so authenticated rather than unauthenticated); a single-hotel deployment or a deployment without hotel-restricted profiles is not meaningfully exposed. Exploitation is a low-severity-to-moderate integrity and confidentiality problem across tenant boundaries rather than an emergency remote compromise: no public exploit code was identified at time of analysis and there is no confirmed active exploitation (no CISA KEV listing), and the assessed CVSS:3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L is consistent with a medium-severity insider authorization issue. Vendor-side fixes exist upstream (PR #1922 and commit 83eb851) but a tagged patched release was not independently confirmed from the supplied data.
Stored cross-site scripting in Frappe ERPNext (before 15.112.0 and 16.x before 16.23.0) lets unauthenticated attackers inject crafted markup through a publicly exposed portal form that saves submissions for later back-office review; the payload executes in the browser of the authenticated staff member who opens the stored record. Because the CVSS 4.0 vector carries PR:N, the entry point is unauthenticated, but exploitation is not self-triggering - a human review action is a hard prerequisite (UI:P), and impact is confined to the reviewing user's browser session (SC:L/SI:L) with no direct server-side confidentiality, integrity, or availability loss (VC:N/VI:N/VA:N). Rated 5.3 (medium), with no public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV); vendor-released patches exist in ERPNext 15.112.0 and 16.23.0.
Server-side request forgery in Frappe ERPNext (before 15.112.0 and 16.x before 16.23.0) allows an authenticated user holding a common operational role to point a writable configuration field at an arbitrary destination, causing the ERPNext server to issue outbound requests to hosts that are only reachable from inside the deployment's network. The issue is rated CVSS 5.3 and requires a valid session with permissions to edit the affected field (PR:L), so it is not exploitable by fully unauthenticated attackers; real-world impact depends entirely on what internal services - such as cloud metadata endpoints, internal APIs, or databases - are reachable from the application server. No public exploit code has been identified and the flaw is not confirmed as actively exploited (no CISA KEV listing); per our assessment this is a moderate, not urgent, priority that is fully resolved by upgrading to a fixed release.
Missing authorization checks in certain Frappe ERPNext endpoints allow any authenticated user to read records beyond the scope their assigned role should permit, exposing data that role-based access control is intended to restrict. The flaw affects ERPNext versions before 15.110.0 and 16.x before 16.21.0 and is exploitable only by a logged-in user holding at least a low-privilege account (CVSS PR:L, assessed CVSS 3.1 base 5.3); it is not reachable by unauthenticated attackers, and impact is limited to confidentiality since no integrity or availability effects were identified. Vendor patches are available in 15.110.0 and 16.21.0, and no public exploit identified at time of analysis.
Missing authorization checks in Frappe ERPNext before 15.121.0 and in 16.x before 16.34.0 let an authenticated user call certain endpoints that do not enforce role-based permission rules, exposing records the account's role should not be able to read. Exploitation requires valid credentials or an active session as a lower-privileged user (PR:L per the CVSS vector), and the impact is confined to unauthorized data disclosure - no modification, deletion, or code execution is possible through this flaw. Independent assessment rates it medium severity (CVSS 3.1 5.3), and no public exploit code has been identified at time of analysis; the practical risk scales with how many low-trust or untrusted authenticated accounts exist in a given deployment and how sensitive the role-restricted data is.
Authenticated users can infer the size and membership of protected Parse Server Relation fields by issuing count queries with the $relatedTo operator before 8.6.93 and in the 9.0.0 line before 9.10.1-alpha.13. The flaw bypasses identity-scoped protectedFields for authenticated, role, or per-user group rules and can act as a membership oracle when combined with an objectId constraint, leaking confidential relation membership such as private groups or block lists. The issue has a CVSS 4.0 score of 5.3, requires prior read access to the owning object, and no public exploit has been identified at time of analysis.
ZKTeco BioTime 9.5.6 Build 20260130.3206 exposes its System Settings API at /base/api/systemSettings to improper access controls, allowing a remote attacker who already holds valid low-privilege credentials to retrieve sensitive system settings due to a CWE-284 authorization flaw. The vulnerability carries a CVSS 4.0 base score of 5.3 (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N) and is not known to be actively exploited or to have public exploit code at the time of analysis. Note the discrepancy between the 'Authentication Bypass' tag and the PR:L vector: the assessed impact is limited to confidentiality of system settings, with no integrity or availability impact, making this a low-to-moderate priority issue despite the tag.
Missing authorization and cross-site request forgery flaws in the Grav Guestbook plugin versions 0.5.0 and 0.5.1 allow an authenticated admin without the admin.guestbook permission, or an external site leveraging a logged-in moderator's session via nonce-less GET requests, to delete or approve guestbook entries. The impact is limited to the integrity of guestbook content, with no confidentiality or availability effect and no code execution. The CVSS 4.0 base score is 5.3, no public exploit code is identified in the provided intelligence, and the issue is not listed in CISA KEV.
Insufficient session expiration in y_project RuoYi up to 4.8.3 allows an authenticated low-privileged remote user to retain or reuse a session token that should have been invalidated, specifically via the changeStatus handling in the Disable API associated with /system/config/add. The issue is rated CVSS v4.0 5.3 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X; CWE-613), with an independent assessment aligning on PR:L but limiting impact to confidentiality only (C:L/I:N/A:N), so real-world risk is narrowed to insiders, credential-reuse scenarios, or follow-on activity after another compromise. No evidence of active exploitation in CISA KEV and no public exploit identified at time of analysis; a public security report is referenced.