WARNING: THIS SITE IS A MIRROR OF GITHUB.COM / IT CANNOT LOGIN OR REGISTER ACCOUNTS / THE CONTENTS ARE PROVIDED AS-IS / THIS SITE ASSUMES NO RESPONSIBILITY FOR ANY DISPLAYED CONTENT OR LINKS / IF YOU FOUND SOMETHING MAY NOT GOOD FOR EVERYONE, CONTACT ADMIN AT ilovescratch@foxmail.com
Skip to content

Users with the Company admin role can assign any role to any user

Critical
glye published GHSA-394j-x37r-2q27 Nov 10, 2022

Package

composer ibexa/core (Composer)

Affected versions

v4.2.*

Patched versions

v4.2.3

Description

Please see https://developers.ibexa.co/security-advisories/ibexa-sa-2022-009-critical-vulnerabilities-in-graphql-role-assignment-ct-editing-and-drafts-tooltips

Severity

Critical

CVE ID

No known CVE

Weaknesses

No CWEs