https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 21:56:47 +0000 https://cve.radiocsirt.org/vuln/cve-2021-33031 <p>In LabCup before &lt;v2_next_18022, it is possible to use the save API to perform unauthorized actions for users without access to user management in order to, after successful exploitation, gain access to a victim&#39;s account. A user without the user-management privilege can change another user&#39;s email address if the attacker knows details of the victim such as the exact roles and group roles, ID, and remote authentication ID settings. These must be sent in a modified save API request. It was fixed in 6.3.0.03.</p> <p>In LabCup before &lt;v2_next_18022, it is possible to use the save API to perform unauthorized actions for users without access to user management in order to, after successful exploitation, gain access to a victim&#39;s account. A user without the user-management privilege can change another user&#39;s email address if the attacker knows details of the victim such as the exact roles and group roles, ID, and remote authentication ID settings. These must be sent in a modified save API request. It was fixed in 6.3.0.03.</p> https://cve.radiocsirt.org/vuln/cve-2021-33031