Executive brief
Winter: My Account preview exposes another backend user's profile by record ID
Affected products
- Packagist winter/wn-backend-module
Junglewise Threat Intelligence
Winter: My Account preview exposes another backend user's profile by record ID
Severity: low · CVSS 3.1 · Published 2026-08-20
Technologies: winter/wn-backend-module (Packagist). Vendors: Packagist.
Related threats
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend FileUpload
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend Filter wid
- Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend did not validate the
- Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. From 1.2.10 through 1.2.12, authenticated