The booking step loader fetched an existing booking by id without checking it belongs to the requesting customer, letting a visitor read or alter someone else's booking. The fix verifies ownership and refuses otherwise. Fixed in 5.2.7. This vulnerability affects the following application versions: LatePoint 5.1.0 LatePoint 5.1.1 LatePoint 5.1.2... Weiterlesen: Insecure Direct Object Reference in LatePoint Booking Steps
Intelligence View
⚡ tsecurity.de Intelligence
Insecure Direct Object Reference in LatePoint Booking Steps
The booking step loader fetched an existing booking by id without checking it belongs to the requesting customer, letting a visitor read or alter someone…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
21 Quellen
CVE-2026-63874 | Linux Kernel up to 6.18.35/7.0.12 MCTP USB ndo_stop improper synchronization
20 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-63873 | Linux Kernel up to 6.18.35/7.0.12 amdxdna amdxdna_aie2_v.c aie2_populate_range memory leak VVulDB Updatesvor 2 Std.CVE-2026-63853 | Linux Kernel up to 6.18.32/7.0.9 Vcn encoder drm/amdgpu/vcn Local Privilege Escalation VVulDB Updatesvor 2 Std.CVE-2026-63856 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Vcn Encoder Decoder drm/amdgpu/vcn privilege escalation VVulDB Updatesvor 2 Std.CVE-2026-63878 | Linux Kernel up to 6.18.34/7.0.11 amdgpu amdgpu_gem.c kvzalloc allocation of resources VVulDB Updatesvor 2 Std.CVE-2026-63880 | Linux Kernel up to 6.18.34/7.0.11 Amdgpu amdgpu_gem_op_ioctl num_entries denial of service VVulDB Updatesvor 2 Std.CVE-2026-63877 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Dz serial_base_ctrl_add null pointer dereference
+14
11 Quellen
Security: Mehrere Probleme in keepassxc (Fedora)
10 weitere Quellen
PPro-Linuxvor 15 Std.Security: Mehrere Probleme in rust-trustfall-rustdoc-adapter60 (Fedora) PPro-Linuxvor 15 Std.Security: Mehrere Probleme in rust-trustfall-rustdoc-adapter (Fedora) PPro-Linuxvor 15 Std.Security: Mehrere Probleme in rust-trustfall-rustdoc-adapter57 (Fedora) PPro-Linuxvor 15 Std.Security: Mehrere Probleme in rust-cargo-semver-checks (Fedora) PPro-Linux Securityvor 15 Std.Mehrere Probleme in rust-trustfall-rustdoc-adapter (Fedora) PPro-Linux Securityvor 15 Std.Mehrere Probleme in rustup (Fedora)
+4
7 Quellen
IT Security News Hourly Summary 2026-10-31 21h : 3 posts
6 weitere Quellen
IIT Security Newsvor 2 Std.IT Security News Hourly Summary 2026-10-31 20h : 6 posts IIT Security Newsvor 3 Std.IT Security News Hourly Summary 2026-10-31 19h : 7 posts IIT Security Newsvor 4 Std.IT Security News Hourly Summary 2026-10-31 18h : 4 posts IIT Security Newsvor 7 Std.IT Security News Hourly Summary 2026-10-31 15h : 13 posts IIT Security Newsvor 6 Std.IT Security News Hourly Summary 2026-10-31 16h : 6 posts IIT Security Newsvor 5 Std.IT Security News Hourly Summary 2026-10-31 17h : 6 posts
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4307808/sicherheitsluecken-cve/insecure-direct-object-reference-in-latepoint-booking-steps/