EUVD-2026-31662

ID: EUVD-2026-31662

Severity: medium

CVSS v4: 5.3 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in OutSystems Lifetime version 11.28.2.3955

Timestamps

Normalized: 2026-05-25T13:04:20Z UTC
Last updated: 2026-05-25T13:04:20Z UTC

References

No references provided.

VulnAI

EUVD-2026-31662

Description

Timestamps

References