CVE-2023-4607

CVE-2023-4607

An authenticated XCC user can change permissions for any user through a crafted API command.

Source: CVE-2023-4607