CVE-2026-57869
2026-07-07
06h16 +00:00
06h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization.
This issue affects MicroRealEstate: through 1.0.0-alpha3.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Authorization Bypass Through User-Controlled Key The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. |
||
| Use of Predictable Algorithm in Random Number Generator The device uses an algorithm that is predictable and generates a pseudo-random number. |
