Threats tagged 'ghsa-hwvm-hrp8-hmq8'

An Improper Privilege Management vulnerability exists in the 'Login with phone number' feature of Hamid Alinia – idehweb, allowing privilege escalation. This affects versions up to and including 1.7.16. The vulnerability has a high severity with a CVSS score of 8.8, indicating it can lead to significant confidentiality, integrity, and availability impacts without requiring user interaction.