PT-2026-69482

Name of the Vulnerable Software and Affected Versions Roskus Prospero Flow CRM versions prior to 5.2.1 Description The permission management component contains a flaw where the permission save endpoint does not perform authorization checks. This allows any authenticated user to grant any role,...