4 matches found
CVE-2026-126318
REDAXO before 5.21.6 contains an authorization bypass vulnerability that allows editors without the versionliveversion permission to modify live article versions by bypassing working version enforcement. Authenticated editors can add, edit, delete, toggle, or reorder live slices via...
EUVD-2026-125202
REDAXO before 5.21.6 contains an authorization bypass vulnerability that allows editors without the versionliveversion permission to modify live article versions by bypassing working version enforcement. Authenticated editors can add, edit, delete, toggle, or reorder live slices via...
CVE-2026-126318
REDAXO versions before 5.21.6 are susceptible to an authorization bypass vulnerability where editors lacking the version[live_version] permission can modify live article versions. The root cause is a failure in working version enforcement , allowing authenticated editors to bypass approval workfl...
CVE-2026-126318 REDAXO before 5.21.6 Authorization Bypass of Live Version Permission
REDAXO before 5.21.6 contains an authorization bypass vulnerability that allows editors without the versionliveversion permission to modify live article versions by bypassing working version enforcement. Authenticated editors can add, edit, delete, toggle, or reorder live slices via...