1 results (0.007 seconds)

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 1

16 Mar 2023 — Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module. • https://github.com/opengoofy/hippo4j/issues/1061 • CWE-732: Incorrect Permission Assignment for Critical Resource •