Threats tagged 'ghsa-8xgp-wvrv-hg89'

A weakness in EasySoft ZenTao PMS up to version 22.6 affects the userModel::checkGroupChange function in the User Module. This vulnerability involves improper privilege management due to manipulation of the group argument, allowing remote exploitation. The vendor has not responded to disclosure requests. The CVSS score is 6.3, indicating a medium severity level.