Beveiligingsadvies

CVE-2025-66385

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-28 00:00:00

Laatst bijgewerkt 2025-11-28 15:18:23

Toegewezen door mitre

CVSS-score 9.4

Status PUBLISHED

Beschrijving

UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a higher role such as admin) via the user-edit endpoint by supplying or modifying role_id or organisation_id fields in the edit request.

← Alle CVE's bekijken Bekijk op cve.org ↗