Privilege Escalation

october is vulnerable to privilege escalation. Users with “Publisher” access is able to escalate their access to “Developer” due to insecure authorization in the create & manager users module.