一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-50875 [HIGH] – Incorrect access control in the /{form}/webhooks/{webhook} endpoint of Deck9 Input v2.0.1

未分类
📑 文章目录

Incorrect access control in the /{form}/webhooks/{webhook} endpoint of Deck9 Input v2.0.1 allows authenticated attackers to arbitrarily modify or delete another tenant’s webhook via a crafted request.