Lucene search
K

6 matches found

Snyk
Snyk
added 2026/05/24 1:48 p.m.6 views

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the doWriteSave process in the UCenter Article Submission Endpoint when handling the id or userId arguments. An attacker can gain unauthorized access to or modify articles by sending crafted requests to the...

6.5CVSS6.6AI score0.00261EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/24 10:45 a.m.8 views

EUVD-2026-31590

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Executing a manipulation of the argument id/userId can lead to improper authorization. The attack may be...

6.5CVSS6.2AI score0.00261EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/24 10:45 a.m.8 views

CVE-2026-9376 JPress UCenter Article Submission Endpoint doWriteSave improper authorization

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Executing a manipulation of the argument id/userId can lead to improper authorization. The attack may be...

6.5CVSS6.2AI score0.00261EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/24 10:45 a.m.10 views

CVE-2026-9376

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Executing a manipulation of the argument id/userId can lead to improper authorization. The attack may be...

6.5CVSS6.2AI score0.00261EPSS
Exploits0References4
CVE
CVE
added 2026/05/24 10:45 a.m.21 views

CVE-2026-9376

CVE-2026-9376 concerns JPress UCenter Article Submission Endpoint (up to 1.0.3). The vulnerable element is an unknown function in /ucenter/article/doWriteSave where manipulating the argument id or userId can lead to improper authorization. The issue can be exploited remotely, and the exploit has ...

6.5CVSS6.2AI score0.00261EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/24 12:0 a.m.9 views

PT-2026-42936

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Executing a manipulation of the argument id/userId can lead to improper authorization. The attack may be...

6.5CVSS6.2AI score0.00261EPSS
Exploits0References4
Rows per page
Query Builder