| शीर्षक | codecanyon RISE - Ultimate Project Manager & CRM 3.8.2 Broken/Incorrect Access Control |
|---|
| विवरण | A vulnerability was discovered in RISE - Ultimate Project Manager & CRM that allows an authenticated user to change the profile picture of any other user by exploiting an Insecure Direct Object Reference (IDOR) in the /index.php/team_members/save_profile_image/[user_id] endpoint. The application does not properly validate whether the authenticated user is authorized to update the specified user ID’s profile image, allowing unauthorized modification of user data. This flaw impacts data integrity and may lead to impersonation or disruption of user experience. |
|---|
| स्रोत | ⚠️ https://github.com/L4zyFox/RISE-Ultimate_Project_Manager_e_CRM |
|---|
| उपयोगकर्ता | TheL4zyF0x (UID 84039) |
|---|
| सबमिशन | 11/04/2025 10:06 PM (1 वर्ष पहले) |
|---|
| संयम | 21/04/2025 04:17 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 305780 [CodeCanyon RISE Ultimate Project Manager 3.8.2 Profile Picture save_profile_image profile_image_file अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|