CVE-2026-4548

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

6.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L                                    

Vulnerability Description

A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The manipulation of the argument userId/role results in improper authorization. The attack may be launched remotely.

Vulnerability Details

Published Date

March 22, 2026

Last Modified

March 23, 2026

CWE ID

CWE-266

Source

NVD

External References

https://vuldb.com/?ctiid.352375
https://vuldb.com/?id.352375
https://vuldb.com/?submit.774805

CVE-2026-4548

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment