Description

Hi, during my analyses I realized that it is possible to perform a privilege escalation by intercepting the request and changing the roles from “user” to “admin” becoming the application’s administrator.

Proof of Concept

poc: