Vendor
maybe-finance
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
Maybe 0.6.0 Missing Authorization via HostingsController show/update
Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role users to access and modify global hosting settings by exploiting unprotected show and update actions in the Settings::HostingsController, wh…