Webid vulnerabilities

2 known vulnerabilities in Webid from Webidsupport. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  webid: Authorization Bypass Through User-Controlled Key

  CVE-2024-32166Apr 19, 2024Webidsupport

  Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended (horizontal privilege escalation).

• 9.1 Critical severity

  Webid: Server-Side Request Forgery

  CVE-2022-41477Oct 14, 2022WebidsupportEPSS 1.34%

  A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories.