1 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the amendment acceptance flow. An attacker can gain unauthorized coauthorship and modify proposal outcomes by submitting amendment accept or reject actions without proper authorization checks. Workaround This...
7.5CVSS5.7AI score0.00223EPSS
SaveExploits0References2
20