Cert/Cc Vince vulnerabilities
5 vulnerabilities
Known vulnerabilities in Cert/Cc Vince, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2024-10469cert · vince +1 moreCERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.EPSS0.18%MediumCVE-2026-18750cert/cc · vinceCVE-2026-18750vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing (or read email/name) for another vendor's contact.EPSS0.33%MediumCVE-2026-18744cert/cc · vinceCVE-2026-18744Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by supplying that member's id — test_func only checks _is_my_case, not ownership of kwargs['member']. Bypasses share_status; leaks embargoed vendor affected/not-affected + statement text cross-tenant.EPSS0.43%CriticalCVE-2026-18749cert/cc · vinceCVE-2026-18749The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has (or is sent) its uuid — leaks not-yet-released coordinator material to vendors on the case.EPSS0.51%MediumCVE-2026-8142cert/cc · vinceCVE-2026-8142VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creation or Ticket updates.EPSS0.15%