Skip to content
OpenAdvisories

Vendor

LibrePhotos

1 known vulnerabilities.

Products

librephotos 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-57943

    LibrePhotos < 1.0.0 - Insecure Direct Object Reference in SetPhotosShared Endpoint

    LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to other users' private photos by bypassing ownership validation. Attackers can mani…

    LibrePhotos librephotos