Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/18 2:19 p.m.•14 views

CVE-2026-93504

A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/...path/+server.ts of the component User Attribute Update Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The name of the patch i...

6.5CVSS0.00366EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/18 1:15 p.m.•11 views

CVE-2026-93504 SveltyCMS User Attribute Update Endpoint +server.ts access control

A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/...path/+server.ts of the component User Attribute Update Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The name of the patch i...

6.5CVSS6AI score0.00366EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/18 1:15 p.m.•27 views

CVE-2026-93504

SveltyCMS 0.0.6 is affected by an improper access control flaw in the User Attribute Update Endpoint (file src/routes/api/[...path]/+server.ts). The vulnerability is exploitable over the network with low privileges and no user interaction, resulting in low impact to confidentiality, integrity, an...

6.5CVSS6AI score0.00366EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/18 1:15 p.m.•15 views

EUVD-2026-82904

A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/...path/+server.ts of the component User Attribute Update Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The name of the patch i...

6.5CVSS6AI score0.00366EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•6 views

PT-2026-95364

Name of the Vulnerable Software and Affected Versions SveltyCMS version 0.0.6 Description Improper access controls exist within the User Attribute Update Endpoint, specifically affecting the file src/routes/api/...path/+server.ts. This flaw allows a remote attacker to manipulate the system due to...

6.5CVSS5.9AI score0.00366EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-93504: Improper Access Control

A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/...path/+server.ts of the component User Attribute Update Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The name of the patch i...

6.5CVSS6AI score0.00366EPSS
SaveExploits0References3
Rows per page
Query Builder