Threats tagged 'ghsa-q27j-6wjr-hgqq'

A vulnerability in the Abdurrab5 online-makeup-store affects the confirm_logged_in/confirm_user function in the Admin Handler component. Manipulation of the adminid argument can lead to missing authorization, allowing remote attackers to bypass access controls. The vulnerability has a CVSS score of 7.3, indicating a medium severity. The product uses a rolling release system, so specific affected or fixed versions are not disclosed. The vendor was notified early, but no patch information is currently available. Exploit details have been publicly disclosed, but no known exploits are reported in the wild.