CVE-2024-36691

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

CVE-2024-36691

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

CVE-2024-36691

Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...

CVE-2024-36691

PPGo_Jobs v2.8.0 is affected by CVE-2024-36691 due to insecure permissions in AdminController.AjaxSave(). Authenticated users can arbitrarily modify other users’ account information. The vulnerability arises from insufficient access control on the AjaxSave() endpoint. Affected component: AdminCon...