CVE-2026-122317

A flaw was found in split-pro. An authorization bypass vulnerability allows an authenticated remote attacker to access sensitive user account details by submitting arbitrary user identifiers to the user.getUserDetails function. An attacker can systematically query sequential IDs to harvest other...