Description (CNA)
A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmFrontPlugin/modules/dmWidget/lib/BasedmWidgetActions.class.php of the component dmWidget. Such manipulation of the argument widget_id leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the patch is 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. A patch should be applied to remediate this issue. The project was informed of the problem early through an issue report but has not responded yet.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| diem-project / diem | affected 5.1.0; affected 5.1.1; affected 5.1.2; affected 5.1.3 |
CWE
CWE-639, CWE-285
References
- https://vuldb.com/vuln/399315
- https://vuldb.com/vuln/399315/cti
- https://vuldb.com/cve/CVE-2026-86183
- https://vuldb.com/submit/896155
- https://github.com/diem-project/diem/issues/450
- https://github.com/diem-project/diem/
ADP enrichment
No English description supplied.
No references supplied.