Threats tagged 'ghsa-r36g-vg5x-pxjg'

OpsTree REMS versions through 1.0.0 have an improper attribution vulnerability that allows authenticated users with lower privileges to post comments as if they were the incident creator. This occurs via the POST /api/v1/incidents/{incident_id}/comment endpoint. Attackers can impersonate higher-privileged users, such as Super Users, thereby corrupting the incident timeline and audit trail.