Report: CVE-2026-4548 - mickasmt next-saas-stripe-starter update-user-role.ts updateUserrole improper aut...

Report: CVE-2026-4548 - mickasmt next-saas-stripe-starter update-user-role.ts updateUserrole improper aut...

CVE ID :CVE-2026-4548 Published : March 22, 2026, 2:16 p.m. | 46 minutes ago Description :A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The manipulation of the argument userId/role results in improper authorization. The attack may be launched remotely. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
March 22, 2026