Skip to content
OpenAdvisories

Vendor

maybe-finance

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    Maybe 0.6.0 Missing Authorization via HostingsController show/update

    Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role users to access and modify global hosting settings by exploiting unprotected show and update actions in the Settings::HostingsController, wh…