Lucene search
Veracode Vulnerability DatabaseVERACODE:30028HistoryApr 19, 2021 - 6:09 a.m.
Insecure Access Controls
2021-04-1906:09:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
22.9%
@curveball/a12n-server uses insecure access controls. Inadequate permissiosn check allows any authenticated user to perform unauthorized editting of other users’ information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @curveball/a12n-server | le | 0.18.1 | |
| a12n-server | le | 0.15.3 |
Related
nvd
nvd
CVE-2021-29452
2021-04-16 22:15:14
osv
osv
CVE-2021-29452
2021-04-16 22:15:14
Any logged in user could edit any other logged in user.
2021-04-19 15:14:33
cvelist
cvelist
CVE-2021-29452 Any logged in user could edit any other logged in user.
2021-04-16 21:35:15
github
github
Any logged in user could edit any other logged in user.
2021-04-19 15:14:33
cve
cve
CVE-2021-29452
2021-04-16 22:15:14
prion
prion
Authentication flaw
2021-04-16 22:15:00