Skip to content
OpenAdvisories

Package · Go

github.com/romitou/insatutorat

1 known vulnerabilities.

1 result · Feed

  • High —

    INSATutorat has an authorization bypass vulnerability in its /api/admin/* endpoints

    ### Impact An authorization bypass vulnerability was discovered in the administration pages of the tutoring application. When a standard user (logged in but without administrator privileges) attempts to access a resource under /api/admin/, the system detects …