Product
Craft CMS versions 5.8.17 through 5.11.1 contain a privilege escalation vulnerability in the getOwners() method that allows authenticated users to promote accounts to administrator status.