EUVD-2026-95350

Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that allows authenticated users to delete other users' subscriptions by ID. Attackers can submit a delete action to /account/protected/sub/subSaveAction with another user's...

CVE-2026-107793 Jivejdon through 5.0 IDOR via subSaveAction Subscription Delete

Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that allows authenticated users to delete other users' subscriptions by ID. Attackers can submit a delete action to /account/protected/sub/subSaveAction with another user's...

CVE-2026-107793

The Jivejdon software (through version 5.0 ) contains an authorization bypass vulnerability in the SubscriptionServiceImp.deleteSubscription component. This flaw allows authenticated users to perform an Insecure Direct Object Reference (IDOR) by submitting a delete action to the /account/protecte...