8 matches found
CVE-2026-110108 MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
CVE-2026-110108
MateCloud versions through 5.0.8 are affected by a missing authorization vulnerability within the StorageController . This flaw allows any authenticated user, including low-privilege or self-registered accounts, to interact with unprotected /api/1/admin/storage endpoints. By supplying arbitrary b...
EUVD-2026-98941
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
CVE-2026-110108 MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
CVE-2026-110108 MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
CVE-2026-110108: Missing Authorization
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
PT-2026-111702
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
Mateaix MateCloud authorization issue vulnerability
Mateaix MateCloud 5.0.8 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of an authorization check. Any authenticated user can manage object storage by calling the unprotected/api/v1/admin/storage endpoint in StorageController. Users with low...