PT-2026-25229

CVE-2026-32382

Publicado

2026-02-18

Atualizado

2026-03-14

Descrição por

CVSS 3.1

5.3

Média

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions raratheme Digital Download versions n/a through 1.1.4

Description A missing authorization issue exists in raratheme Digital Download’s digital-download functionality. This allows exploitation of incorrectly configured access control security levels. The issue concerns the control of access to resources within the application.

Recommendations Versions prior to 1.1.4 should be updated.

Explorabilidade

Correção

Impactos

Pesquisadores

Trương Hữu Phúc

Truonghuuphuc

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-862: Missing Authorization

Identificadores relacionados