Skip to content
OpenAdvisories

Vendor

curveball

1 known vulnerabilities.

Products

a12n-server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2021-29452

    Any logged in user could edit any other logged in user.

    a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to admins. Unfortunately, privileges were incorrectly checked …

    curveball a12n-server @curveball/a12n-server npm