Lucene search

K
hackeroneAbdellah29H1:827595
HistoryMar 23, 2020 - 10:59 p.m.

Qulture.Rocks: Privilege escalation from member user ( editor ) to admin user

2020-03-2322:59:39
abdellah29
hackerone.com
153

Qulture.Rocks has multiple levels of admins, where you could manage parts of the application.
One of those levels had a wrong configuration, which did not blocked it from updating its level to a higher one.

Our team worked rapidly to fix this issue, blocking said level of updating itself