Stump
Monthly
Stump through 0.1.10 allows any authenticated user with the shared AccessSmartList permission to overwrite, delete, or take over other users' smart lists via vulnerable GraphQL mutations. The updateSmartList and deleteSmartList mutations lack a creator check, enabling attackers to set themselves as the new creator and change list visibility to PRIVATE, locking out the original owner. Publicly available exploit code exists, but exploitation requires a multi-user Stump instance and low-privileged credentials, limiting impact to insiders or compromised accounts.
Stump through 0.1.10 allows any authenticated user with the shared AccessSmartList permission to overwrite, delete, or take over other users' smart lists via vulnerable GraphQL mutations. The updateSmartList and deleteSmartList mutations lack a creator check, enabling attackers to set themselves as the new creator and change list visibility to PRIVATE, locking out the original owner. Publicly available exploit code exists, but exploitation requires a multi-user Stump instance and low-privileged credentials, limiting impact to insiders or compromised accounts.