Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/10/14 6:48 p.m.•39 views

CVE-2026-110773 GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint

GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users across all organizations because the IsSuperAdmin guard is absent. Attackers with a self-registered low-privilege account can send an empty or short...

5.3CVSS0.00208EPSS
SaveExploits0References4
Rows per page
Query Builder