Threats tagged 'ghsa-84f2-894g-2279'

A critical vulnerability in the CreditNirvana Collections Platform's login service allows unauthenticated remote attackers to bypass authentication and authorization controls. Exploitation enables attackers to enumerate users, impersonate arbitrary users including administrators, and access or modify sensitive data with the privileges of the impersonated accounts.