Threats tagged 'ghsa-pvxw-88gh-v375'

1Panel-dev CordysCRM versions before 1.9.6 have an authorization bypass vulnerability in the CustomerContactController.get method. This flaw allows authenticated users with ordinary contact or customer read permissions to access contact information of other users without proper organization, owner, or data-scope checks. Exploitation involves sending a GET request to /account/contact/get/{id} with another contact's ID to retrieve sensitive details such as names, phone numbers, owners, departments, linked customers, and custom fields.