Sensitive Information Disclosure

ezsystems/repository-forms is vulnerable to Sensitive Information Disclosure. The vulnerability is caused due to missing permission checks before allowing access to user data. Specifically, the system did not properly verify if the user had the 'content' edit permissions, which allowed...

Privilege Escalation

ezsystems/repository-forms is vulnerable to privilege escalation. The vulnerability exists because the company role assigning function is not properly handled which allows an attacker to limit the access of assigning any roles to any user...