Threats tagged 'ghsa-2p4r-4pmj-4wp8'

Plausible Analytics Community Edition versions through 3.2.1 have an information exposure vulnerability that allows site editors to view pending invitation and ownership-transfer IDs. An attacker who obtains these IDs can register using the invitee's email and accept the invitation, thereby gaining the invited role or taking ownership of the site.