Skip to content
OpenAdvisories

Vendor

Liberu Software

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.8

    Liberu CRM 0.9.1 < 10.0.0 Broken Access Control via TeamPolicy::addTeamMember()

    Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending team invitation to invite additional attacker-controlled accounts with elevated privileges by exploiting a flawed authorization predicate in T…