Metasfresh vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Metasfresh products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-111351 Medium · 4.2 CWE-639 Oct 15, 2026

metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read records outside their scope and modify board card assignments.

CVE-2026-92752 High · 8.3 CWE-639 Sep 16, 2026

metasfresh Unauthorized Access via Document Attachments and Comments Endpoints

metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can enumerate sequential document identifiers to read, replace, and delete attachments and comments on records their role cannot access.