Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 41 MIN AGO
T-41M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-62945
TREK: Cross-trip reservation title disclosure via file links
Medium
PUBLISHED
CNA: GitHub_M
Base score
4.3
CVSS v3.x
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
View raw JSON
CVE Program record
02
Description
CNA: GitHub_M
TREK: Cross-trip reservation title disclosure via file links
03
Metadata
SCHEMA: 5.2
Published
2026-08-20 21:51Z
1 DAY AGO
Last updated
2026-08-20 21:51Z
1 DAY AGO
Reserved
2026-07-14
Assigning CNA
GitHub_M
Record state
PUBLISHED
Severity
Medium (CVSS 4.3)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-639
Authorization Bypass Through User-Controlled Key
Base
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
8ed0a4c1e14e72031df6d13033c0a5298b65c878efb218de0a27de903f058a05
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
mauriceboe
TREK
< 3.1.3
—
05
References
REFS: 4
github.com
https://github.com/liketrek/TREK/security/advisories/GHSA-r4cp-666p-8f69
x_refsource_CONFIRM
github.com
https://github.com/liketrek/TREK/pull/1324
x_refsource_MISC
github.com
https://github.com/liketrek/TREK/commit/03cdb4d27689922460ba87085d04b426d4d40d26
x_refsource_MISC
github.com
https://github.com/liketrek/TREK/releases/tag/v3.1.3
x_refsource_MISC