Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 3:12 p.m.•18 views

CVE-2026-30954

LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy method in LinkRepository.php allows authenticated users to attach other users' private tags and lists to their own links by passing integer IDs...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/10 9:16 p.m.•20 views

CVE-2026-30954

LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy method in LinkRepository.php allows authenticated users to attach other users' private tags and lists to their own links by passing integer IDs...

5.3CVSS0.00287EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/10 8:40 p.m.•33 views

CVE-2026-30954

Affected software: LinkAce (self-hosted archive). Vulnerable component: processTaxonomy() in LinkRepository.php. Root cause / what happens: In 2.1.0 and earlier, authenticated users can attach other users’ private tags and lists to their own links by passing integer IDs. Impact (as stated): allow...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/03/10 8:40 p.m.•50 views

CVE-2026-30954 LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()

LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy method in LinkRepository.php allows authenticated users to attach other users' private tags and lists to their own links by passing integer IDs...

5.3CVSS0.00287EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/10 8:40 p.m.•21 views

EUVD-2026-10877

LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy method in LinkRepository.php allows authenticated users to attach other users' private tags and lists to their own links by passing integer IDs...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/10 8:40 p.m.•21 views

CVE-2026-30954 LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()

LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy method in LinkRepository.php allows authenticated users to attach other users' private tags and lists to their own links by passing integer IDs...

5.3CVSS5.8AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/10 12:00 a.m.•22 views

LinkAce 安全漏洞

LinkAce is a self-hosted repository developed by Kevin Woblick, designed to collect links to your favorite websites. Versions of LinkAce 2.1.0 and earlier contained security vulnerabilities, stemming from an improper authorization in the processTaxonomy method. This vulnerability could potentiall...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rows per page
Query Builder