CVE-2021-45008

CVE-2021-45008 Privilege Escalation von Benutzer zu Administrator Betroffenes Produkt und Version: Plesk Obsidian 18.0.37 Schweregrad: Kritisch Auswirkung: Erlangung hoher Privilegien von Benutzer zu Administrator und Zugriff auf kritische Informationen Beschreibung: Schwachstelle durch unsichere...

CVE-2026-75835

Grav API plugin getgrav/grav-plugin-api before 1.0.14 contains a missing authorization vulnerability in userPassesAuthorize AbstractApiController.php. The function fails to consult the calling request's API key scopes, relying instead on the account's raw super-admin flag and ACL grants. As a...

CVE-2026-75835 Grav API Plugin before 1.0.14 Missing Authorization

Grav API plugin getgrav/grav-plugin-api before 1.0.14 contains a missing authorization vulnerability in userPassesAuthorize AbstractApiController.php. The function fails to consult the calling request's API key scopes, relying instead on the account's raw super-admin flag and ACL grants. As a...