Skip to content
Threat Feed
Subscribe

Tag

Cwe-863

1 brief RSS
high threat

Authorization Bypass in @jhb.software/payload-alt-text-plugin

The @jhb.software/payload-alt-text-plugin v0.7.0 fails to restrict Payload Local API calls, allowing authenticated users to bypass collection-level access controls to read and modify document data.

exploited payload-alt-text-plugin authorization-bypass cms-plugin cwe-863
2t