Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/18 3:5 p.m.14 views

GHSA-R3W8-2C5R-H9J9 Kirby: `pages.access` permission is not checked in the `site/find` REST API route

TL;DR This vulnerability affects all Kirby sites where users of a particular role have no permission to access pages pages.access permission is disabled. This can be due to configuration in the user blueprints, options in the model blueprints, or a combination of both settings. It was possible to...

7.1CVSS5.5AI score0.00269EPSS
SaveExploits0References4
Rows per page
Query Builder