| tiêu đề | SourceCodester Pet Grooming Management Software 1.0 Improper Authorization |
|---|
| Mô tả | The application fails to enforce server-side role-based access control on financial reporting endpoints. A low-privileged authenticated user can access and view sensitive financial data, including tax reports, profit reports, invoice details, and user reports. The system does not validate user role before rendering these pages. |
|---|
| Nguồn | ⚠️ https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_2.md |
|---|
| Người dùng | Hiran (UID 95719) |
|---|
| Đệ trình | 25/02/2026 12:55 (cách đây 7 các tháng) |
|---|
| Kiểm duyệt | 07/03/2026 19:11 (10 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 349716 [SourceCodester Pet Grooming Management Software 1.0 Financial Report Page nâng cao đặc quyền] |
|---|
| điểm | 18 |
|---|