1 matches found
File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands
Summary The fix in commit b6a4fb1 "self-registered users don't get execute perms" stripped Execute permission and Commands from users created via the signup handler. The same fix was not applied to the proxy auth handler. Users auto-created on first successful proxy-auth login are granted executi...
8.8CVSS6.1AI score0.00383EPSS
SaveExploits1References4Affected Software1
20