Beveiligingsadvies

CVE-2026-7145

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-27 17:45:13

Laatst bijgewerkt 2026-04-29 13:57:58

Toegewezen door VulDB

CVSS-score 5.5

Status PUBLISHED

Beschrijving

A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Controllers/Workspaces/WorkspaceInvitationsController.php of the component Invitation Handler. This manipulation of the argument invitation causes authorization bypass. The attack may be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.

← Alle CVE's bekijken Bekijk op cve.org ↗