CVE record · 1 source
CVE-2026-109166
CVSS 6.5lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other…
- CVSS
- 6.5
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other…
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other users' files by supplying arbitrary file ids. Attackers can send another user's…