Alejandro Rivera León

**Name of the Vulnerable Software and Affected Versions** Minerva version 3.6.0 **Description** An insecure direct object reference (IDOR) issue exists in the '/minerva/user/updateUserProfile' endpoint. This improper access control allows an authenticated user to modify the profiles of other registered users, including changing their email addresses. Subsequently, an attacker can use the '/webconnect/#/forgotPassword' endpoint to request a new password, potentially leading to a complete account takeover. **Recommendations** Update Minerva version 3.6.0 to a patched version. Restrict access to the '/minerva/user/updateUserProfile' endpoint to ensure users can only modify their own profile data.

**Name of the Vulnerable Software and Affected Versions** Minerva version 3.6.0 **Description** An insecure direct object reference (IDOR) issue exists in the '/minerva/moUser/show/' endpoint. An authenticated user can access data of other registered users and obtain a user list by modifying the `ID` variable. IDOR is a type of access control flaw where an application provides direct access to objects based on user-supplied input. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Minerva version 3.6.0 **Description** An authorization issue in the '/minerva/moUser/update' endpoint allows an authenticated user with user modification privileges to escalate their privileges to administrator. This is achieved by sending an HTTP request containing a manipulated `identifier` field. This action cannot be performed through the graphical user interface. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fullstep version V5 **Description** Inadequate access control in the registration process allows unauthenticated users to obtain a valid JWT (JSON Web Token), which is a compact, URL-safe means of representing claims to be transferred between two parties. This could enable an attacker to interact with authenticated API resources and compromise the confidentiality of the affected resource. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fullstep V5 **Description** An insecure direct object reference (IDOR) issue in the registration process allows authenticated users to access data belonging to other registered users through various authenticated resources. The issue affects the following endpoints: - '/api/suppliers/v1/suppliers//false' used to list user information - '/#/supplier-registration/supplier-registration//2' used to update user information such as personal details and documents **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.