Vendor
ArnasDon
4 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.9
WACRM: Database-layer authorization bypasses
WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, the profiles_update row-level security policy in supabase/migrations/017_account_sharing.sql permits authenticated users to modify their own account_role and account_id, allowin…