Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/11/10 12:31 a.m.•7 views

EUVD-2026-120536

IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...

5.3CVSS5.8AI score0.00239EPSS
SaveExploits0References6
NVD
NVD
•added 2026/11/10 12:17 a.m.•7 views

CVE-2026-125373

IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...

5.4CVSS0.00239EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/11/09 11:27 p.m.•8 views

CVE-2026-125373 IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views

IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...

5.3CVSS5.9AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/11/09 11:27 p.m.•30 views

CVE-2026-125373 IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views

IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...

5.4CVSS0.00239EPSS
SaveExploits0References5
CVE
CVE
•added 2026/11/09 11:27 p.m.•11 views

CVE-2026-125373

IETF Datatracker versions before 12.83.0 are susceptible to an authorization bypass vulnerability (CWE-639). This flaw allows users with the NomCom role to access records belonging to other committees by providing sequential primary keys . Specifically, attackers can abuse functions such as view_...

5.4CVSS5.8AI score0.00239EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/11/09 12:00 a.m.•5 views

PT-2026-141196

IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse view feedback nominee, view feedback topic, view feedback unrelated and edit nominee to view...

5.4CVSS5.9AI score0.00239EPSS
SaveExploits0References6
Rows per page
Query Builder