← Back

A12n Server

a12n-server

Vendor: Curveballjs • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-29452
1Curveballjs
1A12n Server
Nov 21, 2024
Apr 16, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to admins. Unfortunatel...Show more
a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to admins. Unfortunately, privileges were incorrectly checked allowing any logged in user to make this change. Patched in v0.18.2.Show less