GHSA-9vhh-5f3x-qx5vMedium
Administrative roles and module permissions are stored in mutable local database fields, allowing...
🔗 CVE IDs covered (1)
📋 Description
Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database write access.
🔗 References (4)
- https://nvd.nist.gov/vuln/detail/CVE-2026-118795
- https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical
- https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html
- https://github.com/advisories/GHSA-9vhh-5f3x-qx5v