Vulnerabilities > Ihatemoney

DATE CVE VULNERABILITY TITLE RISK
2020-07-27 CVE-2020-15120 Incorrect Authorization vulnerability in Ihatemoney I Hate Money
In "I hate money" before version 4.1.5, an authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code.
network
low complexity
ihatemoney CWE-863
4.9