CVE-2021-33031

CVE-2021-33031 affects LabCup (v2_next_18022 and earlier). The issue allows users without user-management privileges to manipulate the save API to change another user’s email, if the attacker knows the victim’s details (roles, IDs, remote authentication settings). Successful exploitation can lead...