CVE-2026-82395

Katalog CVE

CVSS 5.3 · Medium EPSS 0,43%

Kerentanan Authorization Bypass Through User-Controlled Key. Skor CVSS 4.0 5.3 (Medium) menurut github.com.

Deskripsi (NVD)

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the media move endpoint derives its permission check from the client-supplied collection value instead of the media item's actual source collection, and src/Sulu/Bundle/MediaBundle/Media/Manager/MediaManager.php allows MediaManager::move() to reassign the item without checking that source. An authenticated backend user with edit permission on one collection and knowledge of a target media identifier can name the allowed collection in the request, move an item out of a restricted collection, and then view or download content the user was not permitted to access. This issue is fixed in versions 2.6.25 and 3.0.8.

Rincian

Terbit di NVD

31 Agustus 2026

Terakhir diubah

8 September 2026

Status NVD

Deferred

CVSS 4.0

5.3 (Medium), sumber github.com
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-639: Authorization Bypass Through User-Controlled Key
CWE-863: Incorrect Authorization

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,2% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/sulu/sulu/commit/2b959de75d61b98433e42db462c246ed9e4ce793
• https://github.com/sulu/sulu/releases/tag/2.6.25
• https://github.com/sulu/sulu/releases/tag/3.0.8
• https://github.com/sulu/sulu/security/advisories/GHSA-h6cx-gjxx-v25c