PT-2026-20715
CVE-2026-25374
·
Published
2026-02-18
·
Updated
2026-02-19
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
raratheme Spa and Salon versions through 1.3.2
Description
An issue exists in raratheme Spa and Salon spa-and-salon related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of access control.
Recommendations
Update raratheme Spa and Salon to a version later than 1.3.2.
Found an issue in the description? Have something to add? Feel free to write us 👾