Skip to content
Threat Feed
Subscribe

Product

ProjectSend (< 2.7.0)

1 brief RSS
high advisory

Incorrect Authorization in ProjectSend API

ProjectSend versions prior to 2.7.0 are vulnerable to an authorization flaw allowing API token holders with management permissions to elevate privileges by modifying the token owner's credentials.

ProjectSend privilege-escalation web-application vulnerability
1t 1c