Beveiligingsadvies

CVE-2026-57945

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-29 17:18:05

Laatst bijgewerkt 2026-07-14 21:34:37

Toegewezen door VulnCheck

CVSS-score 5.3

Status PUBLISHED

Beschrijving

PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information by sending requests to arbitrary user endpoints. Attackers can exploit the missing session-to-user identifier validation in the PUT users API endpoint to overwrite another user's profile details without authorization.

← Alle CVE's bekijken Bekijk op cve.org ↗