CVE-2026-117469

{"id": "CVE-2026-117469", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "fdf66990-8419-4c8c-8848-ec15d75773b4", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "affected": [{"source": "fdf66990-8419-4c8c-8848-ec15d75773b4", "affectedData": [{"repo": "https://gitlab.com/esaqa/psono/psono-server", "vendor": "esaqa GmbH", "modules": ["Psono Server Community Edition", "Psono Server Enterprise Edition"], "product": "Psono", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "7.2.4", "versionType": "semver"}], "programFiles": ["psono/restapi/serializers/file_repository_upload.py", "psono/restapi/serializers/file_repository_download.py"], "defaultStatus": "unaffected"}]}], "published": "2026-10-27T06:17:24.683", "references": [{"url": "https://gitlab.com/esaqa/esaqa/security-advisories/-/blob/master/advisories/CVE-2026-117469.md", "source": "fdf66990-8419-4c8c-8848-ec15d75773b4"}, {"url": "https://gitlab.com/esaqa/psono/psono-server", "source": "fdf66990-8419-4c8c-8848-ec15d75773b4"}, {"url": "https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.2.3/psono/restapi/serializers/file_repository_upload.py", "source": "fdf66990-8419-4c8c-8848-ec15d75773b4"}, {"url": "https://gitlab.com/esaqa/psono/psono-server/-/commit/64753b19bd8d03cfbed20db575f4dccb220d9ca4", "source": "fdf66990-8419-4c8c-8848-ec15d75773b4"}, {"url": "https://gitlab.com/esaqa/psono/psono-server/-/releases/v7.2.4", "source": "fdf66990-8419-4c8c-8848-ec15d75773b4"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "fdf66990-8419-4c8c-8848-ec15d75773b4", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an attacker-selected object key, and append a chunk to the owner's file. Exploitation could upload or overwrite repository objects and consume storage, subject to transfer size, chunk-count, and lifetime limits."}], "lastModified": "2026-10-27T15:00:49.240", "sourceIdentifier": "fdf66990-8419-4c8c-8848-ec15d75773b4"}