CVE-2024-47210

Gladys Assistant before 4.45.1 allows Privilege Escalation a user changing their own role because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js...

CVE-2024-47210

Summary: CVE-2024-47210 affects Gladys Assistant prior to 4.45.1. The issue enables privilege escalation by a user changing their own role, via untrusted input (req.body.role) in updateMySelf within server/api/controllers/user.controller.js. Details from connected sources: All records describe a ...

CVE-2024-47210

Gladys Assistant before 4.45.1 allows Privilege Escalation a user changing their own role because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js...