← Back

Vitodeploy

vitodeploy

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Vito
vito
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-29789
1Vitodeploy
1Vito
Jun 17, 2026
Mar 6, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers. Prior to version 3.20.3, a missing authorization check in workflow site-creation actions allows an auth...Show more
Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers. Prior to version 3.20.3, a missing authorization check in workflow site-creation actions allows an authenticated attacker with workflow write access in one project to create/manage sites on servers belonging to other projects by supplying a foreign server_id. This issue has been patched in version 3.20.3.Show less