CERT24GHSA-jwq2-9qvc-8p98: Authorization bypass vulnerability in Zr.Admin.NETLoading data…
CERT24Threat Observatory
Period

GHSA-jwq2-9qvc-8p98: Authorization bypass vulnerability in Zr.Admin.NET

Commits af07ffc through eb9228a of Zr.Admin.NET contain an insecure direct object reference vulnerability in SysProfileController.UpdateProfile. It allows any authenticated user to modify other accounts through UserId and take over the administrator account.

← Back to intelligence

GHSA-jwq2-9qvc-8p98: Authorization bypass vulnerability in Zr.Admin.NET

Commits af07ffc through eb9228a of Zr.Admin.NET contain an insecure direct object reference vulnerability in SysProfileController.UpdateProfile. It allows any authenticated user to modify other accounts through UserId and take over the administrator account.