← Späť na vyhľadávanie CVE

CVE-2026-42174

Kirby

Popis

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, user avatar creation, replacement and deletion are not gated by user update permissions. This issue has been patched in versions 4.9.0 and 5.4.0.

CVSS 4.3EPSS 0.23700000000000002%Riziko 0.44
Zobraziť zdroj
Zverejnené
2026-05-09 04:16:23
Dotknuté verzie
<4.9.0,<5.4.0
Typ
Core software
Posledná úprava
2026-07-24 21:10:00
Vektor
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N