Threats tagged 'ghsa-xv6g-v6rg-vw4p'

Wolf CMS versions through 0.8.3.1 have an authorization bypass vulnerability in the BackupRestoreController. This flaw is due to a PHP operator precedence error in the permission check expression, allowing authenticated non-administrative users to access backup functionality. Exploitation enables these users to create, download, and restore backups without administrative privileges.