一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-10284 [MEDIUM] – A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by thi

未分类
📑 文章目录

A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resources/TicketResource/Pages/ViewTicket.php of the component Livewire Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.