Cerebrate vulnerabilities
1 known vulnerability in Cerebrate from Cerebrate-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.4average CVSS score
Latest first
- 9.4 Critical severity
Cerebrate: External Control of Assumed-Immutable Web Parameter
UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a higher role such as admin) via the user-edit endpoint by supplying or modifying role_id or organisation_id fields in the edi