CVE-2026-4548 — mickasmt next-saas-stripe-starter update-user-role.ts updateUserrole improper authorization

CVE-2026-4548

mickasmt next-saas-stripe-starter update-user-role.ts updateUserrole improper authorization PUBLISHED

Description (CNA)

A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The manipulation of the argument userId/role results in improper authorization. The attack may be launched remotely.

Affected (CNA)

Vendor / product	Versions
mickasmt / next-saas-stripe-starter	affected 1.0.0

CWE

CWE-285, CWE-266

References

https://vuldb.com/?id.352375
https://vuldb.com/?ctiid.352375
https://vuldb.com/?submit.774805

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.