Product
WebVirtCloud versions up to commit bb920b0 suffer from missing authorization on Django REST Framework API endpoints, allowing authenticated users to perform unauthorized VM migration and domain manipulation.