Threats tagged 'ghsa-jwq2-9qvc-8p98'

Zr.Admin.NET versions from commit af07ffc through eb9228a contain an insecure direct object reference (IDOR) vulnerability in the SysProfileController.UpdateProfile function. This flaw allows any authenticated user to modify other users' accounts by specifying a UserId parameter. Exploiting this, an attacker can change the administrator's phone number to one they control, request an SMS code via the /checkMobile endpoint, and then log in as the administrator through /PhoneLogin, effectively taking over the administrator account.