Package · Maven

org.sakaiproject.profile2:profile2-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2026-54050

Sakai: IDOR in Profile Image Deletion Allows Any Authenticated User to Delete Any User's Profile Image

Sakai is a Collaboration and Learning Environment (CLE). From 23.0 until 23.5 and 25.3, the DELETE /api/users/{userId}/profile/image endpoint allows an authenticated user to delete another user's profile image because ProfileController.removeProfileImage() pa…

sakaiproject sakai org.sakaiproject.profile2:profile2-impl org.sakaiproject.profile2:profile2-api Maven

Sep 15, 2026