6 matches found
EUVD-2026-120536
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...
CVE-2026-125373
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...
CVE-2026-125373 IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...
CVE-2026-125373 IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...
CVE-2026-125373
IETF Datatracker versions before 12.83.0 are susceptible to an authorization bypass vulnerability (CWE-639). This flaw allows users with the NomCom role to access records belonging to other committees by providing sequential primary keys . Specifically, attackers can abuse functions such as view_...
PT-2026-141196
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse view feedback nominee, view feedback topic, view feedback unrelated and edit nominee to view...