CyberRota
← Ana sayfaya dön

CVE-2026-13381

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-20T21:16:46.660 · Çekilme zamanı: 2026-07-21T06:06:29.767004+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-13381
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok

Orijinal NVD Açıklaması

VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' request parameter to enumerate, retrieve, and delete files belonging to other users on the application server.