CVE-2022-25318

Description

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups.

Affected Platforms

Weakness Type

CWE-863

References

• https://github.com/cerebrate-project/cerebrate/commit/15190b930ebada9e8d294db57c…
• https://zigrin.com/advisories/cerebrate-an-incorrect-sharing-group-acl/
• https://github.com/cerebrate-project/cerebrate/commit/15190b930ebada9e8d294db57c…
• https://zigrin.com/advisories/cerebrate-an-incorrect-sharing-group-acl/