Threats Tagged 'ghsa-47w6-gwp4-w6vc'

A vulnerability in vantage6 allows an algorithm developer to edit another developer's algorithm that is pending or under review due to missing ownership checks on edit permissions. This flaw enables unauthorized modification of algorithm metadata, such as updating the image or image tag, which could lead to approval of an unintended image version. No patches or workarounds are currently available for this issue. The vulnerability affects vantage6 versions up to and including 5.0.2.