CVE-2023-45228

The application suffers from improper access control when editing users.A user with read permissions can manipulate users, passwords, andpermissions by sending a single HTTP POST request with modifiedparameters.