Skip to content
OpenAdvisories

Vendor

metasfresh

2 known vulnerabilities.

Products

metasfresh 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-111351

    metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API

    metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeC…

    metasfresh metasfresh