high8.8
CVE-2024-47210
Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySelf in server/api/con…
Impact
Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js.
Affected products
| Product | Affected versions |
|---|---|
| Gladys Assistant | before 4.45.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.