Nixpkgs Security Tracker

Dismissed

Permalink CVE-2025-66527

4.3 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): LOW
Availability impact (A): NONE

updated 2 months, 1 week ago by @SigmaSquadron Activity log

Created automatic suggestion 2 months, 1 week ago
@SigmaSquadron dismissed 2 months, 1 week ago

WordPress Lobo theme <= 2.8.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in VanKarWai Lobo lobo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lobo: from n/a through <= 2.8.6.

References

https://vdp.patchstack.com/database/Wordpress/Theme/lobo/vulnerability/wordpres… vdb-entry
https://vdp.patchstack.com/database/Wordpress/Theme/lobo/vulnerability/wordpres… vdb-entry
https://patchstack.com/database/Wordpress/Theme/lobo/vulnerability/wordpress-lo… vdb-entry

Affected products

lobo

=<<= 2.8.6

Matching in nixpkgs

pkgs.colobot

Real-time strategy game with programmable bots

nixos-unstable 0.2.2-alpha
- nixpkgs-unstable 0.2.2-alpha
- nixos-unstable-small 0.2.2-alpha

Package maintainers

@freezeboy freezeboy

We do not package the Lobo theme.

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.colobot

Package maintainers