Craft CMS Pre-Auth Bypass via Authorization Flaw in entries/move-to-section (CVE-2024-50280)

github.com 2026-07-02查看中文 →

Security AdvisoryCVE-2024-50280HighCraft CMS

Affected:

craftcms/cms >= 5.0.0-RC1, <= 5.9.20

Fixed in:

5.9.21

Referenced CVEs: CVE-2026-50280

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Multi-tenant IDOR Vulnerability Analysis and Fix in Brand/Calendar/Campaign Modules 2026-07-03 SSRF Vulnerability in Eclipse Theia via /services/request-service RPC (CVE-2026-1005) 2026-07-03 Theia Terminal WebSocket Unauthorized Command Execution via Cross-Origin Access (GHSA-78g8-vm3p-97c6) 2026-07-03 Kong Connect MCP Stored Prompt Injection and Credential Exposure (GHSA-7767-3m3w-2p44) 2026-07-03 CISA Advisory ICSA-26-183-03: Unauthenticated Access Vulnerability in Industrial Control Systems 2026-07-03

Offline Archive

Offline screenshot & PDF are Pro-exclusive