CVE-2014-6276Medium · CVSS 5.3EPSS 1.55%Fix availableCVE-2014-6276schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.roundupOperating systemsUpdate to 1.4.20-1.1+deb8u1build0.14.04.1Published April 13, 2016Updated August 6, 2024Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗