CVE-2025-13050

A Broken Function Level Authorization vulnerability in the postcommand.php component allows authenticated users to execute poller post-restart commands . The root cause is an incorrect authorization mechanism that permits non-admin users to access restricted functionality. No specific remediation...

CVE-2025-13050 Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users

Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user...