CVE-2022-27958

Name of the Vulnerable Software and Affected Versions FEBS-Security version 1.0

Description The issue allows attackers to access and modify users' personal information due to insecure permissions configured in the userid parameter at the "/user/getuserprofile" API endpoint.

Recommendations For FEBS-Security version 1.0, restrict access to the /user/getuserprofile API endpoint to minimize the risk of exploitation. Avoid using the userid parameter in this endpoint until the issue is resolved. Consider implementing secure permission checks to prevent unauthorized access to user profiles.