Threats tagged 'ghsa-86p9-mgrp-3g8m'

A permission-related vulnerability exists in Uasoft Badaso 3.0.0-alpha affecting the ApiRequest::class in src/Routes/api.php. The flaw allows remote attackers to manipulate permissions. The issue was reported early but remains unaddressed, and public exploit details are available. The vulnerability has a CVSS score of 7.3, indicating a medium severity level.