CVE-2026-13350 : 詳細

CVE-2026-13350

2026-06-25
17h16 +00:00
Authorization problems
A01-Broken Access Control
2026-10-25
22h10 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-639 Authorization Bypass Through User-Controlled Key
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

参考資料