Project Management
Approved changes feed: RSS · Atom
cpe:2.3:a:devaslanphp:project-management:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Devaslanphp (fe5c38fc-3d5e-5492-a311-418f0015db9f) |
|---|---|
| Product | Project Management (8a80077c-02d2-54ca-83cf-ba665e864c8e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-10285 |
vulnerable | 2026-06-08 07:47:13.780006 |
DevaslanPHP project-management Ticket KanbanScrumHelper.php recordUpdated improper authorization
MEDIUM (5.4)
A vulnerability has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this issue is the function KanbanScrumHelper::recordUpdated of the file app/Helpers/KanbanScrumHelper.php of the component Ticket Handler. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-06-01T19:15:26.718Z
Updated: 2026-06-02T12:22:08.130Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10284 |
vulnerable | 2026-06-08 07:47:13.779703 |
DevaslanPHP project-management Livewire ViewTicket.php doDeleteComment improper authorization
MEDIUM (5.4)
A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resources/TicketResource/Pages/ViewTicket.php of the component Livewire Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-06-01T19:00:09.664Z
Updated: 2026-06-03T16:04:54.681Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.