The booking step loader fetched an existing booking by id without checking it belongs to the requesting customer, letting a visitor read or alter someone else's booking. The fix verifies ownership and refuses otherwise. Fixed in 5.2.7. This vulnerability affects the following application versions: LatePoint 5.1.0 LatePoint 5.1.1 LatePoint 5.1.2... Weiterlesen: Insecure Direct Object Reference in LatePoint Booking Steps
Intelligence View
⚡ tsecurity.de Intelligence
Insecure Direct Object Reference in LatePoint Booking Steps
The booking step loader fetched an existing booking by id without checking it belongs to the requesting customer, letting a visitor read or alter someone…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Powered by tsecurity.de
tsecurity.de Hub
İlgili Story Cluster & Kaynaklar (vector AI)
16 Kaynaklar
CVE-2026-106207 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
15 diğer kaynaklar
VVulDB Updatesvor 4 Std.CVE-2026-106208 | Google Chrome up to 154.0.8037.97 improper authorization (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106209 | Google Chrome up to 154.0.8037.97 Mobile clickjacking (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106210 | Google Chrome up to 154.0.8037.97 Scroll information disclosure (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106213 | Google Chrome up to 154.0.8037.97 WebAudio race condition (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106212 | Google Chrome up to 154.0.8037.97 Autofill improper authorization (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106211 | Google Chrome up to 154.0.8037.97 TabStrip use after free (WID-SEC-2026-3761)
+9
13 Kaynaklar
CVE-2026-72329 | Linux Kernel up to 7.1.4/7.2-rc2 liquidio liquidio_vf.c pcie_flr null pointer dereference
12 diğer kaynaklar
VVulDB Updatesvor 2 Std.CVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue VVulDB Updatesvor 2 Std.CVE-2026-72380 | Linux Kernel up to 7.1.4/7.2-rc1 xen/pvcalls class.c pvcalls_front_event_handler req_id out-of-bounds write VVulDB Updatesvor 2 Std.CVE-2026-72338 | Linux Kernel up to 7.2-rc2 act_pedit net/sched/act_pedit.c tcf_pedit_offload_act_setup tcfp_nkeys toctou VVulDB Updatesvor 2 Std.CVE-2026-72254 | Linux Kernel up to 7.2-rc1 netfilter nft_fib_validate null pointer dereference LLinux, GNU/Linux, free soft…vor 5 Std.The Linux 7.4 Merge Window Is Easily The Largest In Kernel History IIT Security Newsvor 4 Std.Critical Linux Kernel Vulnerability Could Allow Hackers to Gain Remote Root Access
+6
11 Kaynaklar
CVE-2026-92162 | Flatpak up to 1.18.0 flatpak-system-helper privileges management (Nessus ID 374780)
10 diğer kaynaklar
VVulDB Updatesvor 1 Std.CVE-2026-96281 | Red Hat Enterprise Linux System Helper RemoveLocalRef privileges management (EUVD-2026-88027 / Nessus ID 374780) VVulDB Updatesvor 1 Std.CVE-2026-66069 | RabbitMQ up to 4.1.12/4.2.6/4.2.x Management Plugin rabbit_mgmt_wm_reset.erl is_authorized privileges management (WID-SEC-2026-2268) VVulDB Updatesvor 1 Std.CVE-2026-66067 | VMware RabbitMQ up to 4.2.6/4.3.0 Stream Open privileges management VVulDB Updatesvor 3 Std.CVE-2026-65959 | vitessio Vitess up to 24.0.2 Debug Endpoint vrlog.go vrlogStatsHandler privileges management VVulDB Updatesvor 3 Std.CVE-2026-81627 | Red Hat Enterprise Linux VAPIC hw/i386/vapic.c privileges management (EUVD-2026-82872) VVulDB Updatesvor 3 Std.CVE-2026-69399 | Microsoft Azure Arc privileges management
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/tr/4307808/guevenlik-aklar-cve/insecure-direct-object-reference-in-latepoint-booking-steps/