| Package | Affected versions | Patched versions |
|---|---|---|
| energycap | ≥ 7.0.0, ≤ 7.5.6 |
Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created the dashboard.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free