| Package | Affected versions | Patched versions |
|---|---|---|
| cve services | = 1.1.1 |
controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational administrator to transfer a user account to an arbitrary new organization, and thereby achieve unintended access within the context of that new organization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free