Georg Sieber Open Computer Orchestration authorization issue vulnerability

Versions of Georg Sieber Open Computer Orchestration prior to 1.2.3 contain an authorization issue vulnerability. This vulnerability stems from improper permission checks; Self-Service Portal users possessing the rights to create job containers and read visibility can pass the...

GHSA-7G5J-Q8QJ-8984 Magento Insecure Direct Object Reference (IDOR) vulnerability

An insecure direct object reference IDOR vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an administrator with limited privileges to delete the downloadable products folder...