Description
BOLA Allows Cross-Project Target Tampering
in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CervantesSec | cervantes | alpha 0.3 – ≤ 1.3-beta | v.1.4.0-beta |