Skip to content
OpenAdvisories

Product · Hello-hao

Tbed

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-111674

    Tbed through 20240319 Missing Authorization via setImgFileName Endpoint

    Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. Attackers can supply a victim's imgname, exposed in public image URLs and album l…

    Hello-hao Tbed