{"affected":[{"product":"dufs","source":"CNA: VulDB","vendor":"sigoden","versions":[{"status":"affected","version":"0.1"},{"status":"affected","version":"0.2"},{"status":"affected","version":"0.3"},{"status":"affected","version":"0.4"},{"status":"affected","version":"0.5"},{"status":"affected","version":"0.6"},{"status":"affected","version":"0.7"},{"status":"affected","version":"0.8"},{"status":"affected","version":"0.9"},{"status":"affected","version":"0.10"},{"status":"affected","version":"0.11"},{"status":"affected","version":"0.12"},{"status":"affected","version":"0.13"},{"status":"affected","version":"0.14"},{"status":"affected","version":"0.15"},{"status":"affected","version":"0.16"},{"status":"affected","version":"0.17"},{"status":"affected","version":"0.18"},{"status":"affected","version":"0.19"},{"status":"affected","version":"0.20"},{"status":"affected","version":"0.21"},{"status":"affected","version":"0.22"},{"status":"affected","version":"0.23"},{"status":"affected","version":"0.24"},{"status":"affected","version":"0.25"},{"status":"affected","version":"0.26"},{"status":"affected","version":"0.27"},{"status":"affected","version":"0.28"},{"status":"affected","version":"0.29"},{"status":"affected","version":"0.30"},{"status":"affected","version":"0.31"},{"status":"affected","version":"0.32"},{"status":"affected","version":"0.33"},{"status":"affected","version":"0.34"},{"status":"affected","version":"0.35"},{"status":"affected","version":"0.36"},{"status":"affected","version":"0.37"},{"status":"affected","version":"0.38"},{"status":"affected","version":"0.39"},{"status":"affected","version":"0.40"},{"status":"affected","version":"0.41"},{"status":"affected","version":"0.42"},{"status":"affected","version":"0.43"},{"status":"affected","version":"0.44"},{"status":"affected","version":"0.45"},{"status":"affected","version":"0.46.0"},{"status":"unaffected","version":"0.47.0"}]}],"cveId":"CVE-2026-129355","cwes":["CWE-863","CWE-285"],"description":"A vulnerability has been found in sigoden dufs up to 0.46.0. This affects an unknown part of the file src/server.rs of the component WebDAV COPY Operation Handler. The manipulation leads to incorrect authorization. The attack is possible to be carried out remotely. Upgrading to version 0.47.0 is able to mitigate this issue. The identifier of the patch is fba13dffb9c65b5e5e26419f64de709200277a04. It is advisable to upgrade the affected component.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.9,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","version":"4.0"},{"score":6.5,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C","version":"3.1"},{"score":6.5,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C","version":"3.0"},{"score":6.4,"severity":"medium","source":"CNA: VulDB","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P/E:ND/RL:OF/RC:C","version":"2.0"}],"modifiedAt":1794704426308,"publishedAt":1794704426308,"references":[{"source":"CNA: VulDB","tags":["vdb-entry"],"url":"https://vuldb.com/vuln/437418"},{"source":"CNA: VulDB","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/437418/cti"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-129355"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/1043822"},{"source":"CNA: VulDB","tags":["patch"],"url":"https://github.com/sigoden/dufs/commit/fba13dffb9c65b5e5e26419f64de709200277a04"},{"source":"CNA: VulDB","tags":["issue-tracking","patch"],"url":"https://github.com/sigoden/dufs/pull/753"},{"source":"CNA: VulDB","tags":["product"],"url":"https://github.com/sigoden/dufs/"}],"remediation":[{"kind":"fix","source":"CNA: VulDB","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/sigoden/dufs/commit/fba13dffb9c65b5e5e26419f64de709200277a04"},{"kind":"fix","source":"CNA: VulDB","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/sigoden/dufs/pull/753"}],"revision":"d2bb7fe375b5e0683928f60d560ebc0ce1e16d21ef512ef0f4e2b5cf67174c02","sources":[{"modifiedAt":1794704426308,"name":"CNA: VulDB","retrievedAt":1794704903285,"url":"https://www.cve.org/CVERecord?id=CVE-2026-129355"}],"ssvc":null,"status":"published","title":"sigoden dufs WebDAV COPY Operation server.rs authorization","updatedAt":1794704903285}