| Package | Affected versions | Patched versions |
|---|---|---|
| kiteworks | < 9.5.0 | 9.5.0 |
Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full system-administrator privileges beyond those the administrative user was authorized to grant.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free