Beveiligingsadvies

CVE-2026-10284

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-01 19:00:09
Laatst bijgewerkt 2026-06-03 16:04:54
Toegewezen door VulDB
CVSS-score 5.5
Status PUBLISHED

Beschrijving

A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resources/TicketResource/Pages/ViewTicket.php of the component Livewire Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.