CVE-2026-40184
Unauthenticated Access to Uploaded Files in TREK
Résumé
Unauthenticated Access to Uploaded Files in TREK
Description d'origine
La description telle que publiée par la source (souvent en anglais).
TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requiring authentication. This vulnerability is fixed in 2.7.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com