Camunda 7 Authorization Vulnerability

Versions of Camunda 7 prior to 7.24.14, including 7.24.0 and 7.23.0 before 7.23.17, have an authorization issue. This issue stems from a lack of authorization checks in the engine-rest task sub-resources. Single read and delete endpoints do not perform the necessary authorization filtering checks...

SuiteCRM deleteAttachment Data Access

The vulnerability of the deleteAttachment function in the SuiteCRM customer relationship management system is related to access to resources through incompatible types during parameter processing. Exploiting this vulnerability allows an attacker who operates remotely to gain access to read and...

CVE-2022-50590

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of t...

CVE-2022-50590 SuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment' Functionality

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of t...

CVE-2022-50590 SuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment' Functionality

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of t...

SuiteCRM security vulnerabilities

SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM versions prior to 7.12.6 that stems from a type confusion when handling the module parameter in the deleteAttachment function, which could allow an unauthenticated, remote...

CVE-2022-50590: Access of Resource Using Incompatible Type

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of t...

PT-2025-45365

Name of the Vulnerable Software and Affected Versions SuiteCRM versions prior to 7.12.6 Description SuiteCRM contains a type confusion issue in the processing of the module parameter within the deleteAttachment functionality. Successful exploitation could allow remote, unauthenticated attackers t...

ViewerPrivate::deleteAttachment Function Information Disclosure

The vulnerability of the ViewerPrivate::deleteAttachment function in the messageviewer/src/viewer/viewerp.cpp component, a messaging display tool from Messagelib, is related to improper handling of the deletion of message attachments. Exploiting this vulnerability could allow an attacker who...

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

CVE-2021-31855: Cleartext Storage of Sensitive Information

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

PT-2021-4102

Name of the Vulnerable Software and Affected Versions KDE Messagelib versions prior to 5.17.0 Description The issue is related to the incorrect handling of attachment deletion in decrypted encrypted messages stored on remote servers, such as IMAP servers. When a user deletes an attachment from a...