Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/29 10:5 p.m.10 views

GHSA-Q6W3-HPFV-RG36 Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders

Summary modules/documents-files.php mode filerenamesave shares the same root-cause shape as the cross-folder move bug 05-documents-cross-folder-move-idor.md: the top-level rights check at lines 79-89 validates hasUploadRight on the URL parameter folderuuid, but the rename operation acts on fileuu...

6.5CVSS5.8AI score0.00029EPSS
SaveExploits0References2
Rows per page
Query Builder