An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController.

Published Mar 16, 2023 · Updated Feb 26, 2025 · Assigned by mitre