CVE-2026-10284
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Jun 01, 2026
Vendor
unknown
Description
A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resources/TicketResource/Pages/ViewTicket.php of the component Livewire Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.