2 matches found
CVE-2026-7145
A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Controllers/Workspaces/WorkspaceInvitationsController.php of the component Invitation Handler. This manipulation of the argument invitation causes authorization bypass. The attac...
5.5CVSS5.3AI score0.00235EPSS
SaveExploits0References7
CVE-2026-7145: Authorization Bypass Through User-Controlled Key
A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Controllers/Workspaces/WorkspaceInvitationsController.php of the component Invitation Handler. This manipulation of the argument invitation causes authorization bypass. The attac...
5.5CVSS5.4AI score0.00235EPSS
SaveExploits0References3
20