Arp242 vulnerabilities
We track 1 vulnerability in Arp242 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest Arp242 vulnerabilities
- 8.3 High severity
GoatCounter: Improperly Controlled Modification of Dynamically-Determined Object Attributes
GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify protected account fields via form-encoded requests. Attackers with read-only access can POST user.access[a