Threats tagged 'ghsa-37xc-gw75-236w'

A misconfiguration in the Nginx routing for Cloud Controller allows unauthenticated access to certain staging callback endpoints under /internal/v3/. This permits attackers with a valid build or droplet GUID to submit forged staging callbacks, transition droplets to a STAGED state, and persist arbitrary metadata without proper authorization. The issue enables privilege escalation beyond intended role boundaries due to insufficient access controls on these endpoints.