{“lastseen”:””,”description”:”Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic injection via a URL query parameter.\\n\\n’Elixir.PhoenixStorybook.Story.ComponentIframeLive’:handle_params\/3 in lib\/phoenix_storybook\/live\/story\/component_iframe_live.ex reads a PubSub topic directly from params[\\”topic\\”] and broadcasts {:component_iframe_pid, self()} on it with no check that the topic belongs to the requesting session. The shared PhoenixStorybook.PubSub is used to coordinate playground LiveViews with their iframes: a playground subscribes to a session-specific topic and uses the received iframe pid to direct subsequent control messages (variation state, theme switches, extra-assign payloads) via send\/2. Because the iframe trusts the query parameter, an attacker who loads \/storybook\/iframe\/\\u003cstory\\u003e?topic=\\u003cvictim_topic\\u003e causes their iframe process pid to be announced on the victim’s topic. The victim’s playground then addresses its private messages to the attacker’s iframe process.\\n\\nThis issue affects phoenix_storybook from 0.4.0 before 1.1.0.”,”published”:”2026-05-20T13:35:33.215Z”,”modified”:”2026-05-20T13:35:33.215Z”,”type”:”cve”,”title”:”Cross-session PubSub topic injection via URL parameter in phoenix_storybook”,”source”:”EEF”,”references”:”https:\/\/github.com\/phenixdigital\/phoenix_storybook\/security\/advisories\/GHSA-mrhx-6pw9-q5fh\\nhttps:\/\/cna.erlef.org\/cves\/CVE-2026-47068.html\\nhttps:\/\/osv.dev\/vulnerability\/EEF-CVE-2026-47068\\nhttps:\/\/github.com\/phenixdigital\/phoenix_storybook\/commit\/6ee03f1c738d4436dde1b066cf65c80663d489f5″,”id”:”CVE-2026-47068″,”bulletinFamily”:””,”cwe”:[“CWE-639″],”cvelist”:null,”sourceData”:”phenixdigital phoenix_storybook 0.4.0\\nphenixdigital phoenix_storybook 8c2c97b0f505780fee4069988bf86736f51d35d7″,”sourceHref”:””,”cvss”:{“score”:2.3,”severity”:”LOW”,”vector”:”CVSS:4.0\/AV:N\/AC:L\/AT:P\/PR:N\/UI:P\/VC:L\/VI:L\/VA:N\/SC:N\/SI:N\/SA:N”,”version”:”4.0″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”phoenix_storybook”,”version”:”0.4.0″,”vendor”:”phenixdigital”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic injection via a URL query parameter.\\n\\n’Elixir.PhoenixStorybook.Story.ComponentIframeLive’:handle_params\/3 in lib\/phoenix_storybook\/live\/story\/component_iframe_live.ex reads a PubSub topic…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,147,12,71,13,7,11,5],"class_list":["post-55840","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-23","tag-exploit","tag-low","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n