metasfresh vulnerabilities

CVEs whose affected-version data names the metasfresh package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92752High· 8.3PoC

1w ago

metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions

metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can enumerate sequential document identifiers to read, replace,…

▾ Midnightmetasfresh · metasfreshEPSS 0.46%via NVD