CVE-2026-24136-Lab

CVE-2026-24136 - Saleor GraphQL IDOR / 인증되지 않은 PII 유출 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-24136 취약점 유형| IDOR - Authorization Bypass Through User-Controlled Key CWE-639 소프트웨어| Saleor 전자상거래 플랫폼 영향받는 버전| 3.2.0 - 3.20.109 · 3.21.0 - 3.21.44 · 3.22.0 - 3.22.28 패치된 버전| 3.20.110 · 3.21.45 · 3.22.29 CV...

CVE-2025-46732 OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL NotificationLineNotificationMarkReadMutation and NotificationLineNotificationDeleteMutation mutations of OpenCTI allows an authenticated...