Skip to content
OpenAdvisories

Vendor

build-admin

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 2.7

    BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter

    BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can ove…