Threats tagged 'ghsa-68ff-q76g-g93f'

An authorization vulnerability allows any authenticated user, including those with Viewer roles, to change team preferences such as home dashboard, theme, and timezone via an undocumented endpoint lacking access control. This could redirect all team members to a dashboard chosen by the attacker.