Security Advisory

CVE-2024-47210

8.8
HIGH

Vulnerability Description

Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js.
Published Date September 21, 2024
Official Source NIST NVD Advisory