StudioCMS has Authorization Bypass Through User-Controlled Key

Description

StudioCMS contains a Broken Object Level Authorization (BOLA) vulnerability in the Content Management feature that allows users with the “Visitor” role to access draft content created by Editor/Admin/Owner users.

Recommendation

Update the studiocms package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.2.0
• Patched version(s): 0.2.0

References

• GHSA-8cw6-53m5-4932
• CVE-2026-24134
• CWE-639
• CWE-862
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• Authorization Bypass Through User-Controlled Key in url-parse - CVE-2022-0686
• Authorization Bypass Through User-Controlled Key in urijs - CVE-2022-0613
• Parse Server has denylist `requestKeywordDenylist` keyword scan bypass through nested object placement - CVE-2026-30938
• @hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware - CVE-2026-29087

Tags:

npm

studiocms