« Volver al listado

CVE-2026-34832

Estado: AnalizadaMedia (6.5)—

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.66.1, Scoold contains an authenticated authorization flaw in feedback deletion that allows any logged-in, low-privilege user to delete another user's feedback post by submitting its ID to POST /feedback/{id}/delete. The handler enforces authentication but does not enforce object ownership (or moderator/admin authorization) before deletion. In verification, a second non-privileged account successfully deleted a victim account's feedback item, and the item immediately disappeared from the feedback listing/detail views. This issue has been patched in version 1.66.1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Erudika — Scoold

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-34832",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-34832",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-04-03T14:43:03.105703Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "Erudika",
          "product": "scoold",
          "versions": [
            {
              "status": "affected",
              "version": "< 1.66.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-04-02T20:16:27.040",
  "references": [
    {
      "url": "https://github.com/Erudika/scoold/commit/5def88c25405cc60482292bcceb45dc024e899fe",
      "tags": [
        "Patch"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/Erudika/scoold/releases/tag/1.66.1",
      "tags": [
        "Release Notes"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/Erudika/scoold/security/advisories/GHSA-g5fv-xw88-vw44",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-639"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.66.1, Scoold contains an authenticated authorization flaw in feedback deletion that allows any logged-in, low-privilege user to delete another user's feedback post by submitting its ID to POST /feedback/{id}/delete. The handler enforces authentication but does not enforce object ownership (or moderator/admin authorization) before deletion. In verification, a second non-privileged account successfully deleted a victim account's feedback item, and the item immediately disappeared from the feedback listing/detail views. This issue has been patched in version 1.66.1."
    },
    {
      "lang": "es",
      "value": "Scoold es una plataforma de preguntas y respuestas y de intercambio de conocimientos para equipos. Antes de la versión 1.66.1, Scoold contiene una falla de autorización autenticada en la eliminación de comentarios que permite a cualquier usuario con sesión iniciada y de bajo privilegio eliminar la publicación de comentarios de otro usuario enviando su ID a POST /feedback/{id}/delete. El gestor aplica la autenticación pero no aplica la propiedad del objeto (o la autorización de moderador/administrador) antes de la eliminación. En la verificación, una segunda cuenta no privilegiada eliminó con éxito un elemento de comentario de una cuenta víctima, y el elemento desapareció inmediatamente de las vistas de listado/detalle de comentarios. Este problema ha sido parcheado en la versión 1.66.1."
    }
  ],
  "lastModified": "2026-07-24T21:10:00.143",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:erudika:scoold:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52EC1B7D-984C-4F4B-AE33-0B3512EFC00D",
              "versionEndExcluding": "1.66.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}