medium6.6
CVE-2026-24732
Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt!
Impact
Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFileRepo modules) allows Accessing Functionality Not Properly Constrained by ACLs, Bypassing Electronic Locks and Access Controls.This issue affects BlueSpice: from 5.1 through 5.1.3, from 5.2 through 5.2.0. HINT: Versions provided apply to BlueSpice MediaWiki releases. For Extension:NSFileRepo the affected versions are 3.0 < 3.0.5
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| BlueSpice | BlueSpice: From 5.1 | through 5.1.3 |
| From 5.2 | through 5.2.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.