7 matches found
CVE-2026-69703
Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espaceadmin/controleur/ that allows unauthenticated attackers to bypass session-based authentication guards by sending raw HTTP requests that ignore redirects. Attackers can invoke destructive admin actio...
CVE-2026-69703 Atlas-Livre Unauthenticated Access via Admin Controllers Missing Exit
Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espaceadmin/controleur/ that allows unauthenticated attackers to bypass session-based authentication guards by sending raw HTTP requests that ignore redirects. Attackers can invoke destructive admin actio...
CVE-2026-69703 Atlas-Livre Unauthenticated Access via Admin Controllers Missing Exit
Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espaceadmin/controleur/ that allows unauthenticated attackers to bypass session-based authentication guards by sending raw HTTP requests that ignore redirects. Attackers can invoke destructive admin actio...
CVE-2026-69703
CVE-2026-69703 affects Atlas-Livre. An improper access-control flaw in admin controllers (Espace_admin/controleur/) allows unauthenticated users to bypass session guards by sending raw HTTP requests that ignore redirects. The header() redirect is not followed by exit/die, allowing subsequent code...
CVE-2026-69703 Atlas-Livre Unauthenticated Access via Admin Controllers Missing Exit
Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espaceadmin/controleur/ that allows unauthenticated attackers to bypass session-based authentication guards by sending raw HTTP requests that ignore redirects. Attackers can invoke destructive admin actio...
PT-2026-67819
Name of the Vulnerable Software and Affected Versions Atlas-Livre affected versions not specified Description Improper access control exists within the admin controllers located under Espace admin/controleur/. Unauthenticated attackers can bypass session-based authentication guards by sending raw...
CVE-2026-69703: Missing Authentication for Critical Function
Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espaceadmin/controleur/ that allows unauthenticated attackers to bypass session-based authentication guards by sending raw HTTP requests that ignore redirects. Attackers can invoke destructive admin actio...