6 matches found
EUVD-2026-120536
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...
CVE-2026-125373
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...
CVE-2026-125373: ietf-tools datatracker: IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to…
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...
CVE-2026-125373 IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...
CVE-2026-125373 IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...
CVE-2026-125373
IETF Datatracker versions before 12.83.0 are susceptible to an authorization bypass vulnerability (CWE-639). This flaw allows users with the NomCom role to access records belonging to other committees by providing sequential primary keys . Specifically, attackers can abuse functions such as view_...