GHSA-2q6w-qc38-vc8qMediumCVSS 5.4
A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this...
🔗 CVE IDs covered (1)
📋 Description
A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resources/TicketResource/Pages/ViewTicket.php of the component Livewire Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-10284
- https://github.com/devaslanphp/project-management/issues/140
- https://github.com/devaslanphp/project-management
- https://vuldb.com/cve/CVE-2026-10284
- https://vuldb.com/submit/825473
- https://vuldb.com/vuln/367577
- https://vuldb.com/vuln/367577/cti
- https://github.com/advisories/GHSA-2q6w-qc38-vc8q