Security Advisory

CVE-2024-47210

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-21 00:00:00

Last updated 2024-09-23 15:26:54

Assigner mitre

State PUBLISHED

Description

Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js.

← Browse all CVEs View on cve.org ↗