Lucene search
+L

3 matches found

osv_cve
osv_cve
•added 2026/10/14 2:17 p.m.•9 views

CVE-2026-110629 VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions

VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods. Read-only users can invoke delete, won, lost or reopen methods on components like DealIndex, or use unguarded...

7.1CVSS5.8AI score
SaveExploits0References14
Rows per page
Query Builder