CVEvulnerability

CVE-2026-71204

6.2 MEDIUM Published 2026-08-05 Modified 2026-10-24 Official page ↗

Status: Deferred
Published: 2026-08-05
Last modified: 2026-10-24
Assigner: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
CVSS 3.1 (309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c): 6.2 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L
Weaknesses: CWE-284

Description

changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merges it into the stored application settings via .update.

Weakness · CWE (1)

CWE-284 Improper Access Control weakness

References

https://github.com/dgtlmoon/changedetection.io github.com

CVE-2026-71204

Description

Related

Weakness · CWE (1)

References