Vendor
midday-ai
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.1
Midday Missing Owner Check on Team Deletion
Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for every row in the team-membership table irrespective of the role it records, an…