Devlive-community vulnerabilities
We track 1 vulnerability in Devlive-community products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Devlive-community vulnerabilities
- 8.8 High severity
DataCap: Missing Authorization
DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate privileges by calling administrative role and menu management APIs. Attackers, including self-registered accounts, can send PUT requests to /