Skip to content
OpenAdvisories

Archive

14 August 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.2
    CVE-2023-0872 Public exploit

    ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users

    The Horizon REST API includes a users endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to elevation of privilege. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizo…