Vendor
Map-OS versions 5.0.0 through 5.2.1 contain a privilege escalation vulnerability in the REST API that allows low-privileged users to modify administrative account settings.