Threats affecting pkg:github/daptin/daptin

An improper authorization vulnerability in daptin versions up to 0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup records. The issue arises because several permission check functions fail to reject null or zero user ID references, enabling unauthorized access. This vulnerability has a critical severity with a CVSS score of 9.1.