8.8Hoch
Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE
Windmill Labs Windmill CE (Community Edition); Windmill Labs Windmill EE (Enterprise Edition)
Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modification actions via the backend API. Although Operators are documented and priced as…
2.6%EPSS