Skip to content
OpenAdvisories

Vendor

frab

1 known vulnerabilities.

Products

frab 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-125364

    frab through 0.9.1 Privilege Escalation via conference_users_attributes in UsersController

    frab through 0.9.1 contains a privilege escalation vulnerability that allows authenticated crew users to grant themselves orga roles by submitting unchecked nested conference_users_attributes. Attackers can abuse UsersController#update or #create, which skip …

    frab frab