PT-2025-2876 · Indico · Indico

Name of the Vulnerable Software and Affected Versions: Indico versions 3.2.9 through 3.3.5 Description: A Broken Object Level Authorization BOLA issue allows attackers to read or access sensitive information by sending a crafted POST request to the "/api/principals" component. The supplier disput...