2 matches found
Indico may disclose unauthorized user details access via legacy API
ImpactA legacy API to retrieve user details could be misused to retrieve profile details of other users without having admin permissions due to a broken access check. PatchesYou should to update to Indico 3.3.8 as soon as possible.See the docs for instructions on how to update. WorkaroundsIt is...
4.3CVSS6AI score0.0025EPSS
SaveExploits0References6Affected Software1
20