Vulnerabilidades de Zoujingli

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Zoujingli: 1 registro(s), com severidade, exploração e correções.

Think-plugs-admin 1

Somente exploradas (KEV) →

CVE-2026-111655 Baixa · 3.8 CWE-639 16/10/2026

ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit

ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with columns like xurl, hash, or uuid to view download URLs, tamper records, or reassign ownership.