Description
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate).
CVSS 7.3EPSS 0.28300000000000003%Risk 0.75
View source- Published
- 2026-05-27 15:16:26
- Affected versions
- <=5.9.5
- Type
- Installed app
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L