Skip to content
OpenAdvisories
Unscored CVE-2019-1010084 EUVD-2019-1832GHSA-3cm5-wpg3-v928

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to da…

Published Jul 17, 2019 · Updated Aug 5, 2024 · Assigned by dwf

Vendor: Dancer::Plugin::SimpleCRUD Product: Dancer::Plugin::SimpleCRUD

Description

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to _ensure_auth() wrapper result in authentication-checking not being applied to al routes.

Affected products

VendorProductAffectedFixed
Dancer::Plugin::SimpleCRUD Dancer::Plugin::SimpleCRUD ≤ 1.14 —

References