PT-2025-48065

Name of the Vulnerable Software and Affected Versions Primakon Pi Portal version 1.0.18 Description The /api/V2/pp users?email endpoint lacks proper server-side validation against the authenticated session. Manipulating the email parameter to an arbitrary value, such as [email protected], allows...