Frab vulnerabilities
We track 1 vulnerability in Frab products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Frab vulnerabilities
- 8.1 High severity
frab: Improper Privilege Management
frab through 0.9.1 contains a privilege escalation vulnerability that allows authenticated crew users to grant themselves orga roles by submitting unchecked nested conference_users_attributes. Attackers can abuse UsersController#update or #create, which skip f