Threats tagged 'ghsa-3cpq-r4vf-hxwg'

WebVirtCloud contains a missing authorization vulnerability in certain API endpoints due to lack of permission declarations. This allows low-privileged authenticated users to access migration and instance creation functions without proper restrictions, potentially enabling unauthorized migration or undefinition of other users' virtual machines and creation of volumes and domains on any compute host.