Skip to content
OpenAdvisories

Vendor

kurrier-org

1 known vulnerabilities.

Products

kurrier 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-50167

    Kurrier: Authenticated cross-user authorization bypass in Kurrier API

    Kurrier is a modern, self-hosted workspace for email, calendar, contacts, and storage. Prior to 1.2.4, Kurrier API endpoints for listing and retrieving webhook and identity resources did not enforce ownership checks for authenticated API requests. An attacker…

    kurrier-org kurrier