Description (CNA)
The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The-Scratch-Channel / tsc-web-client | affected < 1.2 |
CWE
CWE-862
References
ADP enrichment
No English description supplied.
No references supplied.