FOSSBilling Business Logic Flaw: Authenticated Users Can Reset API Keys for Inactive Orders

github.com 2026-07-07查看中文 →

Security AdvisoryGHSA-vulnerabilityHighFOSSBilling

Affected:

FOSSBilling 0.5.3
FOSSBilling 0.6.0
FOSSBilling 0.7.0
FOSSBilling 0.7.1
FOSSBilling 0.7.2

Fixed in:

FOSSBilling 0.8.0

Referenced CVEs: CVE-2026-53644

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Authenticated SQL Injection in IceHRM Reports via Employee Filter 2026-07-12 Bluetooth BAP Buffer Overflow Fix: Instance-specific Buffer Management 2026-07-12 p11-kit Stack Overflow via Unrestricted Recursion (CVE-2026-13757) 2026-07-12 Supabase Unauthenticated RPC Info Disclosure and App ID Enumeration (CWE-203) 2026-07-11 SQL/CQL Injection in PraisonAI Knowledge Store via Unvalidated Vector Dimension 2026-07-11

Offline Archive

Offline screenshot & PDF are Pro-exclusive