Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/21 5:15 p.m.13 views

October CMS: Editor Sub-Permission Bypass for Asset and Blueprint File Operations

Fine-grained sub-permission checks for asset and blueprint file operations were not enforced in the CMS and Tailor editor extensions. This only affects backend users who were explicitly granted editor access but had editor.cmsassets or editor.tailorblueprints specifically withheld, an uncommon...

3.3CVSS5.7AI score0.00144EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder