Path
ez.no / developer / security / security advisories / ez publish 4.0 / ezsa-2008-003: insufficient form handling made privilege escalation possible.
EZSA-2008-003: Insufficient form handling made privilege escalation possible.
| Versions affected * | Resolved in |
|---|---|
| >= 3.5.6 | 3.9.5, 3.10.1, 4.0.1 |
The registration view (/user/register) allowed an attacker, by manipulating form values, to potentially modify existing users. This could lead to an escalation of privileges.
* For more information about which affected versions are reported, see this page