Threats tagged 'ghsa-p8wc-cj6h-9g96'

Feehi CMS version 2.1.1 contains an incorrect access control vulnerability allowing a low-privilege backend administrator with administrator-update permission to change the password of the built-in super administrator account without providing the old password. This flaw arises because the server does not enforce protection for the super administrator account during password updates.