https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 08:58:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-363653 EUVD-2026-363653 https://cve.radiocsirt.org/vuln/euvd-2026-363653 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84794 <p>Craft CMS versions before 5.10.11 lack authorization checks in the assets/move-asset endpoint when force=1 is supplied. Authenticated users without peer asset permissions can move their own assets into other users&#39; folders and force deletion of conflicting files, allowing unauthorized asset deletion and replacement.</p> <p>Craft CMS versions before 5.10.11 lack authorization checks in the assets/move-asset endpoint when force=1 is supplied. Authenticated users without peer asset permissions can move their own assets into other users&#39; folders and force deletion of conflicting files, allowing unauthorized asset deletion and replacement.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-84794 https://cve.radiocsirt.org/vuln/ghsa-p42x-3r46-8h27 <p>Craft CMS versions before 5.10.11 lack authorization checks in the assets/move-asset endpoint when force=1 is supplied. Authenticated users without peer asset permissions can move their own assets into other users&#39; folders and force deletion of conflicting files, allowing unauthorized asset deletion and replacement.</p> <p>Craft CMS versions before 5.10.11 lack authorization checks in the assets/move-asset endpoint when force=1 is supplied. Authenticated users without peer asset permissions can move their own assets into other users&#39; folders and force deletion of conflicting files, allowing unauthorized asset deletion and replacement.</p> https://cve.radiocsirt.org/vuln/ghsa-p42x-3r46-8h27