Threats tagged 'ghsa-6rgx-j4wh-77c4'

A vulnerability exists in a web application where an API endpoint intended only for administrators is accessible by lower-level read-only users. This endpoint allows importing appliance configuration, enabling unauthorized users to modify configurations and potentially grant themselves administrative permissions.