6.5
Medium
CVE-2026-42671 Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GeoDirectory 2.8 | earliest → 2.8.157 | No fix stated |
Other CVEs of GeoDirectory
The 11 CVEs of GeoDirectory →
CVE-2026-84813
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions
9.3
Critical
CVE-2026-81271
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions
8.8
High
CVE-2026-66604
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions
7.1
High
CVE-2026-68565
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions
6.5
Medium