1 result · Clear filters · Feed
-
Medium 4.4
NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner
## Summary A race condition vulnerability allows authenticated admin-privileged users to escalate to owner privilege. ## Details The vulnerability exists in the `updateUser` function, which is connected to the `/users/{userId}` PUT request. This function then…