📦 Maas

An authenticated attacker can exploit improper input validation in MAAS's websocket handler to self-promote to administrator by injecting the is_superuser property. This grants full administrative con...