FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserperm_by_uid only checks membership of any library. Attackers who know another library's appid or folder id can invoke folder.php operations like deletefolder and rename, or rightdata.php getfolderdata, to delete, modify, or read foreign folders.

Etkilenen sürümler1 yazılım

Kaynaklar10 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/zyx0814/FilePress/issues/76 Üçüncü taraf
• hackmd.io/…library-missing-per-library-authorization-idor Üçüncü taraf
• vulncheck.com/…orization-in-pichome-library-folder-operations Üçüncü taraf
• github.com/…4/FilePress/blob/3.0.1/dzz/pichome/library.php Diğer
• github.com/…ress/blob/3.0.1/dzz/pichome/library/folder.php Diğer
• github.com/…s/blob/3.0.1/dzz/pichome/library/rightdata.php Diğer
• github.com/…/core/class/table/table_pichome_vappmember.php Diğer
• github.com/zyx0814/FilePress Diğer

Kayıt geçmişi

1. 30 Eki 2026 17:16Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-119708abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name
• 8,5 CVE-2026-61708SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)
• 4,3 CVE-2026-119664Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update
• 4,3 CVE-2026-119663Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create
• 4,2 CVE-2026-119661ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries
• 5,4 CVE-2026-119659Blossom through 1.17.1 Authorization Bypass via Folder Endpoints