8 matches found
CVE-2026-111449
Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true disabled by default. An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that...
CVE-2026-111449
The Wheels software (versions 3.0.0 through 4.1.1 ) contains a race condition vulnerability that can disclose detailed exception information. This occurs when allowIPBasedDebugAccess=true is enabled, allowing an authorized administrator's request to modify shared application scope settings. If th...
CVE-2026-111449
Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true disabled by default. An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that...
CVE-2026-111449
Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true disabled by default. An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that...
CVE-2026-111449
Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true disabled by default. An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that...
CVE-2026-111449
Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true disabled by default. An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that...
CVE-2026-111449: Concurrent Execution using Shared Resource with Improper Synchronization
Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true disabled by default. An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that...
WHEELS.DEV: Wheel
WHEELS.DEV: There are race condition vulnerabilities in Wheels 3.0.0 to 4.1.1 versions. This vulnerability stems from race conditions when allowIPBasedDebugAccess is enabled. When administrators request changes to the error/debugging display settings within the shared application scope, these...