CVE-2026-27471
ERP: Document access through endpoints due to missing validation
Résumé
ERP: Document access through endpoints due to missing validation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ERP is a free and open source Enterprise Resource Planning tool. In versions up to 15.98.0 and 16.0.0-rc.1 and through 16.6.0, certain endpoints lacked access validation which allowed for unauthorized document access. This issue has been fixed in versions 15.98.1 and 16.6.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com