10 matches found
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of entitlements in the ClientApp update process. An attacker can gain unauthorized access to update operations by possessing only the create entitlement, which is incorrectly checked f...
9.8CVSS5.8AI score0.00512EPSS
SaveExploits0References2
20