CVE-2021-43828: Improper Privilege Management

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management IDOR has been found in PatrowlManager. All imports findings file is placed under /media/imports/ / In that, ownerid is predictable and tmpfile is in format ...