Description
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary (non-default) group.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| liquidfiles | liquidfiles | < 4.2.12 | 4.2.12 |