CERT24GHSA-h8cq-rcm7-x963: Insecure direct object reference in Zr.Admin.NETLoading data…
CERT24Threat Observatory
Period

GHSA-h8cq-rcm7-x963: Insecure direct object reference in Zr.Admin.NET

Commits 85cff6a through eb9228a of Zr.Admin.NET contain an authorization bypass vulnerability that allows logged-in users to view other users’ workflow instances.

← Back to intelligence

GHSA-h8cq-rcm7-x963: Insecure direct object reference in Zr.Admin.NET

Commits 85cff6a through eb9228a of Zr.Admin.NET contain an authorization bypass vulnerability that allows logged-in users to view other users’ workflow instances.