CVE-2026-30269

Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privileged role via /platform/user/username. The role field is accepted by the update model without a manageusers permission check for self-updates, enabling privileg...

doorman 安全漏洞

Doorman is a configuration manager developed by Marcin Wielgoszewski. Versions 0.1.0 and 1.0.2 of Doorman contain security vulnerabilities. These vulnerabilities stem from improper access control, allowing any authenticated user to update their own account role to a non-administrator privilege ro...