Threats tagged 'ghsa-f64v-vg62-99f4'

SiteServer SSCMS versions up to 7.4.0 have an authorization bypass vulnerability in the ChannelsController component. This flaw allows site-scoped administrators with Channels permission on one site to access and modify channels belonging to other sites by supplying foreign channel IDs. The vulnerability breaks multi-site isolation by permitting unauthorized reading and overwriting of channel names, file paths, templates, link URLs, and custom fields across sites.