Description
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
Metrics
CVSS 2.0 2.1/10
AV:L/AC:L/Au:N/C:P/I:N/A:NAffected software
No affected versions have been published.
Timeline
- Published
- Apr 24, 2000
- Last modified
- Jun 16, 2026
- NVD status
- Modified