Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:kill_bill:kill_bill:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Kill Bill Administrative Endpoint Permission Bypass

Kill Bill versions 0.24.21 and earlier contain a security misconfiguration where authenticated users with minimal account:read privileges can perform unauthorized administrative actions.

Kill Bill web-application-vulnerability privilege-escalation access-control
1t 1c