GoatCounter vulnerabilities
1 known vulnerability in GoatCounter from Arp242. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest first
- 8.3 High severity
GoatCounter: Improperly Controlled Modification of Dynamically-Determined Object Attributes
GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify protected account fields via form-encoded requests. Attackers with read-only access can POST user.access[a