PT-2025-43482

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android Framework component where insufficient input validation can be exploited to trick a user into accepting a permission through a tapjacking or overlay attack. This...

Granting the 'Administer Projects' permission to a 'Custom Field' within a permission scheme allows all users to see the Project Settings

h3. Issue Summary This is reproducible on Data Center: yes Granting the Administer Projects permission to a User custom field value results in users having access to the Project Settings area even when the field is not populated. h3. Steps to Reproduce Create a new project with sample data Create...