Threats tagged 'ghsa-h7r9-wrf2-gr7g'

KnowStreaming versions up to and including 3.4.1 have a missing authorization vulnerability in their REST API endpoints. This flaw allows any authenticated user to bypass role-based access control and access protected administrative functionality. Exploitation can lead to attackers creating administrator accounts or elevating their privileges without proper authorization.