plainpad vulnerabilities
1 known vulnerability in plainpad from Alextselegidis. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest first
- 8.3 High severity
plainpad: Improper Privilege Management
Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/{id}. The endpoint directly persists the admin attribute f