Skip to content
OpenAdvisories

Vendor

infonl

1 known vulnerabilities.

Products

dimpact-zaakafhandelcomponent 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-55551

    ZAC: Missing per-zaaktype authorization on by-ID decision and process reads

    ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in `src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt` omit `assertPolicy`(`policyService.readZaakRechten(zaak).lezen…

    infonl dimpact-zaakafhandelcomponent