PT-2026-133503
CVE-2026-119565
·
تاريخ النشر
2026-10-30
·
تاريخ التحديث
2026-10-30
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update traffic change notification that allows authenticated site editors to reassign notifications by supplying a site id parameter. Attackers can submit traffic change notification[site id] set to another site's primary key via PUT /sites/:domain/traffic-change-notification/:type to receive that site's traffic alerts and visitor figures.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾