Auth bypass in Phenixdigital Phoenix_storybook
CVE-2026-47068
Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic injection via a URL query parameter. 'Elixir.PhoenixStorybook.Story.ComponentIframeLive':handle_params/3 i…
Vulnerability class: IDOR (Insecure Direct Object Reference)
EPSS: 0.001 (17.2th percentile) — read the EPSS interpretation.
Affected products
- Phenixdigital Phoenix_storybook — versions 0.4.0, 8c2c97b0f505780fee4069988bf86736f51d35d7
Weakness classification (CWE)
References
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)