Himer - Social Questions and Answers < 2.1.1 - Subscriber+ Private Group Joining via IDOR

2024-06-1200:00:00

Sushmita Poudel

himer

social q&a

subscriber+

private group

idor

june 26 2024

exploit

AI Score

6.5

Confidence

High

EPSS

Percentile

9.2%

Description The plugin allows any authenticated user to join a private group due to a missing authorization check on a function

The PoC will be displayed on June 26, 2024, to give users the time to update.