Threats tagged 'ghsa-rjpf-7pf5-q54x'

An authorization bypass vulnerability in wger allows an authenticated attacker to inject workout log entries into another user's SlotEntry by omitting ownership checks on the slot_entry foreign key. This leads to cross-user data corruption affecting the victim's workout progression calculations.