2 matches found
Sharp Missing Authorization Check in Quick Creation Command Endpoints
Impact The create and store endpoints of the Quick Creation Command feature did not enforce any authorization check. An authenticated Sharp user without create permission on a given entity could bypass the authorization layer and either retrieve the creation form or submit new records for that...
4.3CVSS6AI score0.00366EPSS
SaveExploits0References6Affected Software1
20