Skip to content
OpenAdvisories

Product · Alanaktion

phproject

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-104991 Public exploit

    Phproject < 1.8.7 Missing Authorization via Issues REST API

    Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (single_get, single_comments, single_comments_post) that allows authenticated API key holders to bypass the security.restrict_access confidentia…

    Alanaktion phproject