CVE-2026-40185: Trek: eksik yetkilendirme

Açıklama (NVD)

TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.

Özet bilgiler

Ürün

Mauriceboe Trek

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,21 (yüzdelik 11)

CWE

CWE-862

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• github.com
• github.com
• CWE-862