| عنوان | Portabilis i-Educar 2.9.10 Improper Handling of Insufficient Permissions or Privileges |
|---|
| الوصف | Users without the necessary privileges to change user types can modify the permissions of registered user types through an arbitrary request to the endpoint responsible for this action. This allows low-privileged users to escalate their privileges by granting maximum permissions to the user type they are associated with, compromising all sections of the application. |
|---|
| المصدر | ⚠️ https://docs.google.com/document/d/1yGubpU9I6JnkKsrdNRP6bUCeQv3ZDcknXAHOzFZBkGQ/ |
|---|
| المستخدم | m3m0o (UID 87980) |
|---|
| ارسال | 08/10/2025 04:05 AM (1 سنة منذ) |
|---|
| الاعتدال | 09/10/2025 01:59 PM (1 day later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 327714 [Portabilis i-Educar حتى 2.9.10 User Type AccessLevelController.php تكوين خاطئ] |
|---|
| النقاط | 18 |
|---|