CVE-2026-25231: Models Foldermodel Php Cwe 000 Cve 2026 25231

The application lacks strict ownership validation and authorization boundaries for file/folder operations. Authenticated users could bypass access controls.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0PHP
greprules fetch cve-2026-25231-models-foldermodel-php-cwe-000-cve-2026-25231 --engine opengrep

Description

The application lacks strict ownership validation and authorization boundaries for file/folder operations. Authenticated users could bypass access controls.