This repository has been archived by the owner on May 7, 2024. It is now read-only.

CVE-2023-39792 #830

Open

AnduriCaser opened this issue Feb 13, 2024 · 0 comments

AnduriCaser commented Feb 13, 2024

I found an access control vulnerability in add new service section. Non-admin user can add new services without any permission.

I explained the details in the link below

https://docs.google.com/document/d/1UYEz1Kymr0_twJA0iwpEqacpLT2LuT8s7Bt3Ib9EJto/edit?usp=sharing

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.