18 matches found
CVE-2026-119665
WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set projectpk to another project's sequential ID to modify, delete, or trigger scheduled tas...
CVE-2026-119665
WHartTest versions 2.2.0 through 2.8.1 are vulnerable to a missing authorization flaw in the ScheduledTaskViewSet and TaskExecutionViewSet components. The root cause allows authenticated users to access tasks belonging to other projects by manipulating the project_pk to target sequential IDs. Exp...
CVE-2026-119665 WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs
WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set projectpk to another project's sequential ID to modify, delete, or trigger scheduled tas...
CVE-2026-119665 WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs
WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set projectpk to another project's sequential ID to modify, delete, or trigger scheduled tas...
EUVD-2026-114081
WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set projectpk to another project's sequential ID to modify, delete, or trigger scheduled tas...
CVE-2026-119665 WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs
WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set projectpk to another project's sequential ID to modify, delete, or trigger scheduled tas...
CVE-2026-119665: MGdaasLab WHartTest: WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and…
WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set projectpk to another project's sequential ID to modify, delete, or trigger scheduled tas...
PT-2026-133595
WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set project pk to another project's sequential ID to modify, delete, or trigger scheduled...
CVE-2026-111617
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
CVE-2026-111617
WHartTest through 2.8.1 contains a missing authentication vulnerability in its UI-Automation WebSocket endpoints . Specifically, the UiAutomationConsumer accepts all connections, allowing unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ endpoints. An attacker can regis...
CVE-2026-111617
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
CVE-2026-111617 WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
CVE-2026-111617 WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
EUVD-2026-103039
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
CVE-2026-111617 WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
CVE-2026-111617: Missing Authentication for Critical Function
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
PT-2026-116016
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
MGdaasLab WHartTest Authorization Issue Vulnerability
MGdaasLab WHartTest 2.8.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from a lack of authentication; unverified attackers can connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints. This may lead to intercepting the test case payloads of...