6.5
Moyenne
CVE-2026-42671 Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GeoDirectory 2.8 | premières → 2.8.157 | Pas de correctif indiqué |
Autres CVE de GeoDirectory
Les 11 CVE de GeoDirectory →
CVE-2026-84813
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions
9.3
Critique
CVE-2026-81271
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions
8.8
Élevée
CVE-2026-66604
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions
7.1
Élevée
CVE-2026-68565
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions
6.5
Moyenne