PT-2018-13693

Name of the Vulnerable Software and Affected Versions Gleez CMS version 1.2.0 Description The issue allows attackers, who are logged-in users, to view the profile page of other users due to an Insecure Direct Object Reference. This can be demonstrated by navigating to the "user/3" endpoint on...