| Summary | The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role during registration. The /api/user/signup endpoint fails to validate the role parameter in the request body |
|---|---|
| Publication Date | May 20, 2026, 1:16 a.m. |
| Registration Date | May 20, 2026, 4:13 a.m. |
| Last Update | May 20, 2026, 3:04 a.m. |