Description
A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The manipulation of the argument userId/role results in improper authorization. The attack may be launched remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mickasmt | next-saas-stripe-starter | 1.0.0 | — |
References
- VDB-352375 | mickasmt next-saas-stripe-starter update-user-role.ts updateUserrole improper authorization vdb-entry technical-description
- VDB-352375 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #774805 | mickasmt next-saas-stripe-starter 1.0.0 Improper Access Controls third-party-advisory