PT-2026-46868

UserController::upsertUser writes user data in SYSTEM SCOPE and does not filter the admin field. A non-admin API user with user:create or user:update ACL permission can set admin: true on new or existing users, escalating to full admin access. The Problem In...

CVE-2022-27250

creationtimestamp| type| source ---|---|--- 2022-06-03 13:45:04+00:00| seen| https://t.me/truesecator/3017...