Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-126318 1 Redaxo 2 Core, Redaxo 2026-11-13 4.3 Medium
REDAXO before 5.21.6 contains an authorization bypass vulnerability that allows editors without the version[live_version] permission to modify live article versions by bypassing working version enforcement. Authenticated editors can add, edit, delete, toggle, or reorder live slices via content/functions, slice ids, content_slice_status, content_move_slice, history restore, or content_copy, bypassing approval workflows.