In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.

Published Aug 29, 2023 · Updated Oct 1, 2024 · Assigned by mitre