Threats tagged 'ghsa-767r-3gfx-x4wx'

IETF Datatracker versions prior to 12.83.0 have an authorization bypass vulnerability that permits NomCom role holders to access records of other committees by manipulating sequential primary keys. This flaw enables attackers to view confidential nominee identities, alter feedback classifications, and modify nominee email addresses through specific functions.