10 matches found
Craftcms-PoC-CVE-2026-31266
CVE-2026-31266 - Craft CMS 認可の欠落 CVE 情報 フィールド| 値 ---|--- CVE ID| CVE-2026-31266 ベンダー| Pixel & Tonic 製品| Craft CMS 影響を受けるバージョン| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; 概念実証 With allowAdminChanges=false curl -X POST "http://target/actions/app/migrate" 証拠 攻撃前: mysql SELECT COUNT FR...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
Missing Authorization
Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Missing Authorization via the migrate endpoint /actions/app/migrate. An attacker can perform unauthorized migration operations by sending crafted requests to this endpoint. Remediation There ...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
CVE-2026-31266
Craft CMS versions 5.9.5 and earlier are vulnerable to a Missing Authorization (CWE-862) flaw in the migrate endpoint (/actions/app/migrate). The root cause is identified in src/controllers/AppController.php (lines 65-68), where the $allowAnonymous array explicitly permits anonymous access to the...
CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint /actions/app/migrate...
Craft CMS 安全漏洞
Craft CMS is an open-source content management system CMS developed by Craft CMS. Versions of Craft CMS 5.9.5 and earlier contained security vulnerabilities, which were caused by a lack of authorization verification at the migrate endpoint...
