10 matches found
Craftcms-PoC-CVE-2026-31266
CVE-2026-31266 - Craft CMS 권한 누락 CVE 정보 필드| 값 ---|--- CVE ID| CVE-2026-31266 공급업체| Pixel & Tonic 제품| Craft CMS 영향받는 버전| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; 개념 증명 allowAdminChanges=false 설정 상태 curl -X POST "http://target/actions/app/migrate" 증거 공격 전: mysql SELECT COUNT FROM...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
Missing Authorization
Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Missing Authorization via the migrate endpoint /actions/app/migrate. An attacker can perform unauthorized migration operations by sending crafted requests to this endpoint. Remediation There ...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
CVE-2026-31266
Craft CMS versions 5.9.5 and earlier are vulnerable to a Missing Authorization (CWE-862) flaw in the migrate endpoint (/actions/app/migrate). The root cause is identified in src/controllers/AppController.php (lines 65-68), where the $allowAnonymous array explicitly permits anonymous access to the...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
Craft CMS 安全漏洞
Craft CMS is an open-source content management system CMS developed by Craft CMS. Versions of Craft CMS 5.9.5 and earlier contained security vulnerabilities, which were caused by a lack of authorization verification at the migrate endpoint...
