Skip to content
OpenAdvisories

Product · suitenumerique

people

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5

    People: Privilege Escalation via Missing Role Ceiling in Mail Domain Invitation

    People is an application to handle users and teams, and distribute permissions across La Suite. Prior to version 1.25.0, a user holding the Administrator role on a mail domain could send a crafted invitation request to promote any existing user (including use…