CVE-2026-24732

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-24732", "assignerOrgId": "ff95705b-1a40-4639-8017-a58fa868baee", "state": "PUBLISHED", "assignerShortName": "HW", "dateReserved": "2026-02-06T14:21:19.100Z", "datePublished": "2026-03-04T12:13:09.918Z", "dateUpdated": "2026-03-04T14:27:00.797Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "modules": ["Extension:NSFileRepo"], "packageName": "Extension:NSFileRepo", "product": "BlueSpice", "vendor": "Hallo Welt! GmbH", "versions": [{"lessThanOrEqual": "5.1.3", "status": "affected", "version": "5.1", "versionType": "semver"}, {"lessThanOrEqual": "5.2.0", "status": "affected", "version": "5.2", "versionType": "semver"}]}], "datePublic": "2025-09-18T12:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFileRepo modules) allows Accessing Functionality Not Properly Constrained by ACLs, Bypassing Electronic Locks and Access Controls.<p>This issue affects BlueSpice: from 5.1 through 5.1.3, from 5.2 through 5.2.0.</p><p>HINT: Versions provided apply to BlueSpice MediaWiki releases. For&nbsp;Extension:NSFileRepo the affected versions are 3.0 &lt; 3.0.5</p>"}], "value": "Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFileRepo modules) allows Accessing Functionality Not Properly Constrained by ACLs, Bypassing Electronic Locks and Access Controls.This issue affects BlueSpice: from 5.1 through 5.1.3, from 5.2 through 5.2.0.\n\nHINT: Versions provided apply to BlueSpice MediaWiki releases. For\u00a0Extension:NSFileRepo the affected versions are 3.0 < 3.0.5"}], "impacts": [{"capecId": "CAPEC-1", "descriptions": [{"lang": "en", "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}, {"capecId": "CAPEC-395", "descriptions": [{"lang": "en", "value": "CAPEC-395 Bypassing Electronic Locks and Access Controls"}]}], "metrics": [{"cvssV4_0": {"Automatable": "YES", "Recovery": "NOT_DEFINED", "Safety": "PRESENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 6.6, "baseSeverity": "MEDIUM", "exploitMaturity": "UNREPORTED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/S:P/AU:Y/RE:L", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-552", "description": "CWE-552 Files or Directories Accessible to External Parties", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-732", "description": "CWE-732 Incorrect Permission Assignment for Critical Resource", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ff95705b-1a40-4639-8017-a58fa868baee", "shortName": "HW", "dateUpdated": "2026-03-04T13:09:58.832Z"}, "references": [{"url": "https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2026-02"}], "source": {"discovery": "UNKNOWN"}, "title": "Improper permission checks in Extension:NSFileRepo", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Make sure&nbsp;<code><code>$wgGroupPermissions['*']['read']</code></code><code></code> is set to <code>false</code> in the&nbsp; <code>LocalSettings.php</code>."}], "value": "Make sure\u00a0$wgGroupPermissions['*']['read'] is set to false in the\u00a0 LocalSettings.php."}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-04T14:26:52.232334Z", "id": "CVE-2026-24732", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-04T14:27:00.797Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-24732", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-04T14:26:52.232334Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-04T14:26:56.977Z"}}], "cna": {"title": "Improper permission checks in Extension:NSFileRepo", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-1", "descriptions": [{"lang": "en", "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}, {"capecId": "CAPEC-395", "descriptions": [{"lang": "en", "value": "CAPEC-395 Bypassing Electronic Locks and Access Controls"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "PRESENT", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.6, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/S:P/AU:Y/RE:L", "exploitMaturity": "UNREPORTED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hallo Welt! GmbH", "modules": ["Extension:NSFileRepo"], "product": "BlueSpice", "versions": [{"status": "affected", "version": "5.1", "versionType": "semver", "lessThanOrEqual": "5.1.3"}, {"status": "affected", "version": "5.2", "versionType": "semver", "lessThanOrEqual": "5.2.0"}], "packageName": "Extension:NSFileRepo", "defaultStatus": "affected"}], "datePublic": "2025-09-18T12:00:00.000Z", "references": [{"url": "https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2026-02"}], "workarounds": [{"lang": "en", "value": "Make sure\u00a0$wgGroupPermissions['*']['read'] is set to false in the\u00a0 LocalSettings.php.", "supportingMedia": [{"type": "text/html", "value": "Make sure&nbsp;<code><code>$wgGroupPermissions['*']['read']</code></code><code></code> is set to <code>false</code> in the&nbsp; <code>LocalSettings.php</code>.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFileRepo modules) allows Accessing Functionality Not Properly Constrained by ACLs, Bypassing Electronic Locks and Access Controls.This issue affects BlueSpice: from 5.1 through 5.1.3, from 5.2 through 5.2.0.\n\nHINT: Versions provided apply to BlueSpice MediaWiki releases. For\u00a0Extension:NSFileRepo the affected versions are 3.0 < 3.0.5", "supportingMedia": [{"type": "text/html", "value": "Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFileRepo modules) allows Accessing Functionality Not Properly Constrained by ACLs, Bypassing Electronic Locks and Access Controls.<p>This issue affects BlueSpice: from 5.1 through 5.1.3, from 5.2 through 5.2.0.</p><p>HINT: Versions provided apply to BlueSpice MediaWiki releases. For&nbsp;Extension:NSFileRepo the affected versions are 3.0 &lt; 3.0.5</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-552", "description": "CWE-552 Files or Directories Accessible to External Parties"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-732", "description": "CWE-732 Incorrect Permission Assignment for Critical Resource"}]}], "providerMetadata": {"orgId": "ff95705b-1a40-4639-8017-a58fa868baee", "shortName": "HW", "dateUpdated": "2026-03-04T13:09:58.832Z"}}}, "cveMetadata": {"cveId": "CVE-2026-24732", "state": "PUBLISHED", "dateUpdated": "2026-03-04T14:27:00.797Z", "dateReserved": "2026-02-06T14:21:19.100Z", "assignerOrgId": "ff95705b-1a40-4639-8017-a58fa868baee", "datePublished": "2026-03-04T12:13:09.918Z", "assignerShortName": "HW"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "modules": ["Extension:NSFileRepo"], "packageName": "Extension:NSFileRepo", "product": "BlueSpice", "vendor": "Hallo Welt! GmbH", "versions": [{"lessThanOrEqual": "5.1.3", "status": "affected", "version": "5.1", "versionType": "semver"}, {"lessThanOrEqual": "5.2.0", "status": "affected", "version": "5.2", "versionType": "semver"}]}], "source": "security@bluespice.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFileRepo modules) allows Accessing Functionality Not Properly Constrained by ACLs, Bypassing Electronic Locks and Access Controls.This issue affects BlueSpice: from 5.1 through 5.1.3, from 5.2 through 5.2.0.\n\nHINT: Versions provided apply to BlueSpice MediaWiki releases. For\u00a0Extension:NSFileRepo the affected versions are 3.0 < 3.0.5"}, {"lang": "es", "value": "Archivos o directorios accesibles a terceros externos, vulnerabilidad de asignaci\u00f3n incorrecta de permisos para recursos cr\u00edticos en Hallo Welt! GmbH BlueSpice (m\u00f3dulos de la extensi\u00f3n:NSFileRepo) permite acceder a funcionalidades no restringidas adecuadamente por ACLs, eludiendo bloqueos electr\u00f3nicos y controles de acceso. Este problema afecta a BlueSpice: desde 5.1 hasta 5.1.3, desde 5.2 hasta 5.2.0.\n\nPISTA: Las versiones proporcionadas se aplican a las versiones de BlueSpice MediaWiki. Para la extensi\u00f3n:NSFileRepo, las versiones afectadas son 3.0 &lt; 3.0.5."}], "id": "CVE-2026-24732", "lastModified": "2026-06-17T10:23:29.900", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "YES", "Recovery": "NOT_DEFINED", "Safety": "PRESENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:L/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "source": "security@bluespice.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24732", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-04T14:26:52.232334Z", "version": "2.0.3"}}]}, "published": "2026-03-04T13:15:58.287", "references": [{"source": "security@bluespice.com", "url": "https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2026-02"}], "sourceIdentifier": "security@bluespice.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-552"}, {"lang": "en", "value": "CWE-732"}], "source": "security@bluespice.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.1.0,5.1.3]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.2.0,5.2.0]"}}], "enrichment": {"confidence": 84.0, "confidence_source": "matching", "scores": [{"score": 84.0, "source": "matching"}]}, "original": {"product": "BlueSpice", "source": "cna", "vendor": "Hallo Welt! GmbH"}, "product": "bluespice", "vendor": "hallowelt"}], "analysis": {"en": {"generated_at": "2026-04-16T13:38:20.491803+00:00", "value": {"mitigation_remediation": ["Upgrade BlueSpice to a version beyond 5.1.3 and 5.2.0, which contain the official fix for this access control issue.", "Upgrade Extension:NSFileRepo to version 3.0.5 or later to resolve the incorrect permission assignment.", "Apply the recommended workaround by setting $wgGroupPermissions['*']['read'] to false in LocalSettings.php until a patched release is available."], "summary": {"action": "Immediate Patch", "impact": "Unauthorized Data Access via Incorrect Permissions"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Hallo Welt! GmbH BlueSpice MediaWiki releases from version 5.1 through 5.1.3 and from 5.2 through 5.2.0. For the Extension:NSFileRepo module, the affected releases are 3.0 up to but not including 3.0.5.", "description_and_impact": "An improper permission check in the BlueSpice Extension:NSFileRepo module allows attackers to retrieve or modify files and directories that should be restricted, effectively bypassing the system's access control lists. The flaw aligns with CWE-552, where files or directories become accessible to external parties, and CWE-732, indicating incorrect permission assignments. An attacker who can exploit this vulnerability could read sensitive configuration data, upload malicious files, or alter the content of shared repositories, thereby compromising both confidentiality and integrity of the system.", "risk_and_exploitability": "With a CVSS score of 6.6, the issue presents a moderate severity. The EPSS score is less than 1%, indicating a very low exploitation probability at present, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote exploitation via the web interface, where an unauthenticated or low\u2011privileged user can trigger the faulty file access logic. Despite the low probability of exploitation, the potential impact on sensitive data warrants proactive remediation."}}}}, "created": "2026-03-05T09:08:44.268455+00:00", "updated": "2026-04-16T13:45:21.950568+00:00", "vendors": ["hallowelt", "hallowelt$PRODUCT$bluespice"]}