Отправить #880053: invoiceninja Invoice Ninja 5.13.26 Broken Access Control (IDOR)Информация

Названиеinvoiceninja Invoice Ninja 5.13.26 Broken Access Control (IDOR)
ОписаниеA critical broken access control vulnerability exists in the vendor portal profile update functionality of Invoice Ninja v5.13.26. The application fails to verify that the authenticated vendor owns the referenced VendorContact object during route model binding, allowing an authenticated attacker to manipulate the vendor_contact identifier to view and modify another vendor's profile information. This includes changing sensitive fields such as the email address, which may facilitate account takeover through the password reset process.
Источник⚠️ https://ashutosh-jena.in/blog/broken-access-control-idor-in-invoice-ninja-vendor-portal-v51326
Пользователь
 MAVERICK-VF142 (UID 99541)
Представление04.07.2026 11:49 (2 месяцы назад)
Модерация01.09.2026 00:52 (2 months later)
Статуспринято
Запись VulDB397499 [invoiceninja Invoice Ninja до 5.13.26 Vendor Portal Profile Update /vedor/profile/ vendor_contact эскалация привилегий]
Баллы20

Do you know our Splunk app?

Download it now for free!