Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 11:12:09 +0000 EUVD-2026-224269 https://cve.radiocsirt.org/vuln/euvd-2026-224269 EUVD-2026-224269 https://cve.radiocsirt.org/vuln/euvd-2026-224269 fkie_cve-2024-44314 https://cve.radiocsirt.org/vuln/fkie_cve-2024-44314 <p>TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update order statuses. The issue occurs in the index_onUpdateStatus() function within Orders.php, which fails to verify if the user has permission to modify an order&#39;s status. This flaw can be exploited remotely, leading to unauthorized order manipulation.</p> <p>TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update order statuses. The issue occurs in the index_onUpdateStatus() function within Orders.php, which fails to verify if the user has permission to modify an order&#39;s status. This flaw can be exploited remotely, leading to unauthorized order manipulation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-44314 GHSA-w5h7-mw56-4v7x — TastyIgniter Has an Incorrect Access Control Vulnerability https://cve.radiocsirt.org/vuln/ghsa-w5h7-mw56-4v7x <p><strong>Affected:</strong> Packagist: tastyigniter/tastyigniter</p> <p>TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update order statuses. The issue occurs in the index_onUpdateStatus() function within Orders.php, which fails to verify if the user has permission to modify an order&#39;s status. This flaw can be exploited remotely, leading to unauthorized order manipulation.</p> <p><strong>Affected:</strong> Packagist: tastyigniter/tastyigniter</p> <p>TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update order statuses. The issue occurs in the index_onUpdateStatus() function within Orders.php, which fails to verify if the user has permission to modify an order&#39;s status. This flaw can be exploited remotely, leading to unauthorized order manipulation.</p> https://cve.radiocsirt.org/vuln/ghsa-w5h7-mw56-4v7x