Skip to content
OpenAdvisories

Vendor

Southclaws

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.2

    Storyden through 1.26.16 Privilege Escalation via MANAGE_ROLES Role Assignment

    Storyden through 1.26.16 contains a privilege escalation vulnerability that allows users holding MANAGE_ROLES to grant the ADMINISTRATOR permission without being administrators. Attackers can call AccountAddRole on another controlled account or use RoleCreate…