CVE-2024-10953 — data.all authenticated users can perform mutating update operations on persisted notification records
An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their user is not a membe…
Published: 2024-11-09 · CVSS: 5.3 · CVSS 4.0
An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their user is not a member of.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7