Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 10:30:23 +0000 CVE-2026-125379 — Movim through 0.35.5 Authorization Bypass via Post::ajaxGetPost Cached Post Read https://db.gcve.eu/vuln/cve-2026-125379 <p><strong>Affected:</strong> movim</p> <p>Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to read restricted posts by supplying server, node and nodeid values. Attackers who know item identifiers can retrieve cached community or contact-only posts from the pod-wide cache before the XMPP authorization check runs.</p> <p><strong>Affected:</strong> movim</p> <p>Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to read restricted posts by supplying server, node and nodeid values. Attackers who know item identifiers can retrieve cached community or contact-only posts from the pod-wide cache before the XMPP authorization check runs.</p> https://db.gcve.eu/vuln/cve-2026-125379