Skip to content
OpenAdvisories

Vendor

cerebrate

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.7

    Cerebrate before v1.37 allows mass assignment of record identifiers during object creation

    Cerebrate before version 1.37 contains a mass-assignment vulnerability in the generic CRUD add path. The add() handler attempted to remove an attacker-supplied id from $params before normalizing the request through __massageInput(). Because the normalized $in…