PT-2026-82483
CVE-2026-17562
·
Published
2026-08-27
·
Updated
2026-08-28
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
AdisyonPro versions prior to 5.21.0
Description
An authorization bypass exists due to a user-controlled key, which allows access to functionality not properly constrained by Access Control Lists (ACLs). This is an Insecure Direct Object Reference (IDOR), a condition where an application provides direct access to objects based on user-supplied input without sufficient authorization checks.
Recommendations
Update AdisyonPro to version 5.21.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾