Skip to content
OpenAdvisories

Vendor

Hallo Welt!

18 known vulnerabilities.

Products

BlueSpice 17 Common User Interface Component 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-25716

    BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users

    Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authenticated user without special privileges to block or unblock arbitrary user accounts, including administrators. The REST endpoints /bs-usermanag…

    Hallo Welt! BlueSpice