Lucene search
+L

1 matches found

OSV
OSV
added 2026/09/03 2:12 p.m.4 views

CVE-2026-85213 Kill Bill through 0.24.21 Missing Authorization on AdminResource Endpoints

Kill Bill through 0.24.21 fails to enforce permission annotations on several AdminResource endpoints including getQueueEntries, invalidatesCache, and putOutOfRotation. Authenticated users with minimal account:read permissions can read internal queues, flush server caches, and disable the server b...

7.2CVSS5.5AI score
SaveExploits0References6
Rows per page
Query Builder