CVE-2026-4548

A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The manipulation of the argument userId/role results in improper authorization. The attack may be launched remotely.

Score

CVSS 3.1 6.3 Medium

Status

Deferred - cna@vuldb.com

Published

2026-03-22

Last modified

2026-03-23

Weaknesses

CWE-266, CWE-285

Affected products

• Next-saas-stripe-starter (Mickasmt)

References

• https://vuldb.com/?ctiid.352375
• https://vuldb.com/?id.352375
• https://vuldb.com/?submit.774805