Beveiligingsadvies

CVE-2026-5798

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-14 12:26:09

Laatst bijgewerkt 2026-05-14 13:48:15

Toegewezen door INCIBE

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter. An authenticated attacker could exploit this vulnerability to access information about any employee (first names, last names, roles, job titles, and vacation records, among others) by modifying that identifier in requests sent to the server.

← Alle CVE's bekijken Bekijk op cve.org ↗