Threats tagged 'ghsa-2v93-vp82-cjv8'

Velociraptor versions prior to 0.76.4 have an authorization bypass vulnerability in the HTTP API. A user with only the reader role in the root organization can read files from other organizations without explicit permissions. This issue does not allow users with read access to sub-organizations to access the root or other organizations. The vulnerability is fixed in version 0.76.4.