Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/08 9:12 p.m.4 views

GHSA-6H3C-R723-7FX3 NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak

Impact In versions from 1.5.0 up to and including 3.0.0, any authenticated portal user could complete and tamper with another user's open task by submitting it on their behalf. The task submission endpoint accepted a task ID and a payload, but it never checked whether the task actually belonged t...

8.1CVSS6.2AI score
SaveExploits0References2
Rows per page
Query Builder