Gladysassistant vulnerabilities
We track 1 vulnerability in Gladysassistant products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 21, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Gladysassistant vulnerabilities
- 8.8 High severity
gladys_assistant: Uncontrolled Resource Consumption
Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js.