Vendor
PatrowlManager versions up to 1.8.4 contain an authorization bypass vulnerability in events and alerts API endpoints, allowing authenticated attackers to modify or delete data across different user contexts.