Lucene search
+L

1 matches found

OSV
OSV
added 2026/09/11 9:28 p.m.5 views

GHSA-F7H9-QV4X-9X57 Shopping privilege escalation through missing authorization in Settings components

Summary Four Livewire components in the Settings area expose destructive Filament actions delete / edit that perform no server-side authorization. Any authenticated user who can reach the Settings pages — i.e. holding only the coarse accesssetting permission, without being an admin and without an...

5.4CVSS
SaveExploits0References2
Rows per page
Query Builder