1 matches found
CVE-2026-110773 GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint
GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users across all organizations because the IsSuperAdmin guard is absent. Attackers with a self-registered low-privilege account can send an empty or short...
5.3CVSS0.00208EPSS
SaveExploits0References4
20