CyberSecBulletin

Webidsupport vulnerabilities

We track 2 vulnerabilities in Webidsupport products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 19, 2024.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Webidsupport vulnerabilities

  • 8.8 High severity

    webid: Authorization Bypass Through User-Controlled Key

    CVE-2024-32166Webidsupport

    Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended (horizontal privilege escalation).

  • 9.1 Critical severity

    Webid: Server-Side Request Forgery

    CVE-2022-41477WebidsupportEPSS 1.34%

    A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories.