Vulnerabilidades de Zlt2000
CVEs publicadas que afetam produtos de Zlt2000: 4 registro(s), com severidade, exploração e correções.
CVE-2026-92469
Alta · 8.1
CWE-639 16/09/2026
microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Check
zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} endpoint that performs no ownership validation. Authenticated attackers can enumerate file identifiers via GET /files and delete arbitrary users' files and metadata by supplying their identifiers to the delete endpoint.
CVE-2026-92468
Média · 6.5
CWE-639 16/09/2026
microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center
zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsearch index by specifying the index name in POST /search/{indexName} and GET /agg/requestStat/{indexName}/{routing} path variables. Attackers can query arbitrary indices including sys_user to retrieve sensitive user records and password hashes without proper access controls.
CVE-2026-92467
Alta · 8.3
CWE-620 16/09/2026
microservices-platform through 6.0.0 Unverified Password Change via /users/password
zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request body and a new password to overwrite credentials of any non-administrator account without verification.
CVE-2026-92466
Alta · 8.8
CWE-862 16/09/2026
microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including user management, role assignment, and Elasticsearch index operations by bypassing the disabled authorization enforcement.