Threats tagged 'ghsa-xjc5-mcwx-53m7'

LogChimp versions from 0.9.0-alpha.1 up to but not including 0.9.3 contain an authorization bypass vulnerability. This flaw allows authenticated post authors to modify posts they do not own by manipulating postId and id parameters in the request body. Exploitation enables attackers to overwrite critical post fields such as title, slug, content, boardId, and roadmap_id.