Threats tagged 'ghsa-55q4-5xf4-rr34'

Pexip Infinity versions before 38.2, as well as versions 39.0, 39.1, and 40.0, contain an improper access control vulnerability in an internal API. This flaw allows an attacker with local access to one node in a Pexip Infinity installation to execute arbitrary code as an unprivileged user on another node. The vulnerability is classified as CWE-863 (Incorrect Authorization) and has a high severity with a CVSS score of 8.8.