Cerebrate-project Cerebrate vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Cerebrate-project Cerebrate: 1 record(s), with affected versions and fixes.

CVE-2025-66385 Critical · 9.4 CWE-472 Nov 28, 2025

UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged…

UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a higher role such as admin) via the user-edit endpoint by supplying or modifying role_id or organisation_id fields in the edit request.