Beveiligingsadvies

CVE-2026-8406

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-11 13:32:36

Laatst bijgewerkt 2026-06-11 14:28:42

Toegewezen door Fluid Attacks

CVSS-score 7.1

Status PUBLISHED

Beschrijving

openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mail_id value.

← Alle CVE's bekijken Bekijk op cve.org ↗