CVE-2026-5652
Authorization Bypass Through User-Controlled Key in Crafty Controller
Résumé
Authorization Bypass Through User-Controlled Key in Crafty Controller
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticated attacker to perform user modification actions via improper API permissions validation.
Références
- advisory github.com
- advisory nvd.nist.gov
- web gitlab.com