Vendor
cerebrate
4 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.7
Cerebrate before v1.37 allows mass assignment of record identifiers during object creation
Cerebrate before version 1.37 contains a mass-assignment vulnerability in the generic CRUD add path. The add() handler attempted to remove an attacker-supplied id from $params before normalizing the request through __massageInput(). Because the normalized $in…