In Eigen NLP 3.10.1, a lack of access...... CVE-2021-38616
6.5
AV
AC
AU
C
I
A
发布：
2021-09-07
修订：
2024-11-21
In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to increase their own permissions via a user_permissions array in a PATCH request. A guest user could modify other users' profiles and much more.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
