← Database

CVE-2024-47210

HIGH CVSS: 8.8 Published: 2024-09-21 Modified: 2026-06-17

Description

Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js.

Affected Platforms

Unknown

Weakness Type

CWE-400

References