Studiocms vulnerabilities
Products
Newest
- studiocms StudioCMS REST getUsers Exposes Owner Account Records to Admin Tokens 2.7 Low
- studiocms StudioCMS: IDOR in User Notification Preferences Allows Any Authenticated User to Modify Any User's Settings 5.4 Medium
- studiocms StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts 4.7 Medium
- studiocms StudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation 6.8 Medium
- studiocms, @studiocms s3-storage +1 more StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check 7.6 High
- studiocms StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service 7.1 High
- studiocms StudioCMS Affected by Privilege Escalation via Insecure API Token Generation 8.8 High
- studiocms StudioCMS has an Authorization Bypass Through User-Controlled Key 6.5 Medium