PT-2026-118455 · Sharkord · Sharkord

Leediay153

+2

·

CVE-2026-113595

·

Publicado

2026-10-20

·

Atualizado

2026-10-20

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated member to modify the server logo without the MANAGE SETTINGS permission. Attackers can remove the current logo and replace it with an uploaded image that is published to every connected client.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-113595

Produtos afetados

Sharkord