Vulnerabilidades de Mickasmt
CVEs publicadas que afetam produtos de Mickasmt: 3 registro(s), com severidade, exploração e correções.
CVE-2026-4549
Baixa · 3.1
CWE-285 22/03/2026
mickasmt next-saas-stripe-starter Stripe API open-customer-portal.ts openCustomerPortal authorization
A flaw has been found in mickasmt next-saas-stripe-starter 1.0.0. Affected by this issue is the function openCustomerPortal of the file actions/open-customer-portal.ts of the component Stripe API. This manipulation causes authorization bypass. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitation is known to be difficult.
CVE-2026-4548
Média · 6.3
CWE-266 22/03/2026
mickasmt next-saas-stripe-starter update-user-role.ts updateUserrole improper authorization
A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The manipulation of the argument userId/role results in improper authorization. The attack may be launched remotely.
CVE-2026-4547
Média · 4.3
CWE-840 22/03/2026
mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error
A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.