Moyenne
4.3
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest...
CVE-2026-112787
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() that allows authenticated users to view EEO demographic reports without the canSeeEEOInfo permission. Attackers can invoke the customizeEEOReport and generateEEOReportPreview actions to view aggregate ethnicity, veteran, gender and disability statistics.
Source: NIST National Vulnerability Database NVD GitHub Advisory