Skip to content
OpenAdvisories

Vendor

daptin

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.1

    daptin - Authentication Bypass via Null Owner Permission Check on usergroup Objects

    An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup records. The permission check functions (CanRead, CanPeek, CanCreate, CanUpdate, CanDelete, CanRefer) in s…