Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/10/14 2:17 p.m.•16 views

CVE-2026-110629 VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions

VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods. Read-only users can invoke delete, won, lost or reopen methods on components like DealIndex, or use unguarded...

7.1CVSS
SaveExploits0References11
Rows per page
Query Builder