Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/10 8:40 p.m.10 views

CVE-2026-30954 LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()

LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy method in LinkRepository.php allows authenticated users to attach other users' private tags and lists to their own links by passing integer IDs...

5.3CVSS5.8AI score0.00201EPSS
SaveExploits0References3
Rows per page
Query Builder