10 matches found
Craftcms-PoC-CVE-2026-31266
CVE-2026-31266 - Craft CMS Falta de Autorización Información del CVE Campo| Valor ---|--- CVE ID| CVE-2026-31266 Proveedor| Pixel & Tonic Producto| Craft CMS Versiones Afectadas| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; Prueba de Concepto With allowAdminChanges=false curl -X POST...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
Missing Authorization
Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Missing Authorization via the migrate endpoint /actions/app/migrate. An attacker can perform unauthorized migration operations by sending crafted requests to this endpoint. Remediation There ...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
Craft CMS 安全漏洞
Craft CMS is an open-source content management system CMS developed by Craft CMS. Versions of Craft CMS 5.9.5 and earlier contained security vulnerabilities, which were caused by a lack of authorization verification at the migrate endpoint...
PT-2026-43997
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
CVE-2026-31266
Craft CMS versions 5.9.5 and earlier are vulnerable to a Missing Authorization (CWE-862) flaw in the migrate endpoint (/actions/app/migrate). The root cause is identified in src/controllers/AppController.php (lines 65-68), where the $allowAnonymous array explicitly permits anonymous access to the...
