CVE-2021-46561

controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational…

published January 26, 2022

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational administrator to transfer a user account to an arbitrary new organization, and thereby achieve unintended access within the context of that new organization.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00836 · 57.4th percentile
Published
2022-01-26T17:48Z
EPSS history
Timeline
  • 26 JAN 17:48Z
    controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational…
    cvelistv5