Privilege Escalation Vulnerability in JetEngine

CVE-2023-48757

What is CVE-2023-48757?

An improper privilege management vulnerability has been identified in Crocoblock's JetEngine product, which permits unauthorized users to gain elevated access. This flaw allows a threat actor to manipulate user roles and permissions, potentially leading to unauthorized actions within the system. It affects JetEngine versions from n/a through 3.2.4. Administrators are advised to review their configurations and apply necessary security measures to mitigate the risk associated with this vulnerability.

References