CVE-2026-12673 | BDVDB-2026-341853 Detail
liquidfilesliquidfiles
Description#
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary (non-default) group.
Impact#
CAPEC-233 Privilege Escalation
Weaknesses#
- CWE-285 Improper Authorization
References#
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.