Georgios Sotiriadis

يوجد خلل في مخطط التفويض يسمح للمستخدمين ذوي الصلاحيات المنخفضة بالوصول إلى معلومات تتجاوز أذوناتهم المحددة وتعديلها.

SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations.

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.