6 matches found
CVE-2025-26368
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to remove user groups via crafted HTTP requests...
CVE-2025-26368
creationtimestamp| type| source ---|---|--- 2025-02-12 14:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991464810192408 2025-02-12 15:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhyhdyobd72v 2025-02-12 15:35:57+00:00| seen|...
CVE-2025-26368
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to remove user groups via crafted HTTP requests...
CVE-2025-26368
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to remove user groups via crafted HTTP requests...
CVE-2025-26368
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to remove user groups via crafted HTTP requests...
CVE-2025-26368
CVE-2025-26368 affects Q-Free MaxTime