In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41363.json",
"cna_assigner": "mitre"
}