CVE-2026-5652
Authorization Bypass Through User-Controlled Key in Crafty Controller
概要
Authorization Bypass Through User-Controlled Key in Crafty Controller
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticated attacker to perform user modification actions via improper API permissions validation.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web gitlab.com