| Package | Affected versions | Patched versions |
|---|---|---|
| bonobo git server | < 6.5.0 | 6.5.0 |
Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free