PT-2026-27952 · Aarsiv Groups · Automated Fedex Live/Manual Rates With Shipping Labels
CVE-2026-25456
·
Publicado
2026-03-25
·
Atualizado
2026-03-29
CVSS v3.1
7.3
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Automated FedEx live/manual rates with shipping labels versions n/a through 5.1.8
Description
A missing authorization issue exists in Aarsiv Groups Automated FedEx live/manual rates with shipping labels a2z-fedex-shipping. This allows exploitation of incorrectly configured access control security levels.
Recommendations
Update Automated FedEx live/manual rates with shipping labels to a version greater than 5.1.8.
Correção
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Automated Fedex Live/Manual Rates With Shipping Labels