From fd3cec5d730ad36a2245cd80b4276cfa14be2d07 Mon Sep 17 00:00:00 2001 From: Moe <github@m03.ca> Date: Fri, 19 Feb 2021 15:02:30 +0000 Subject: [PATCH] Fix Superuser Penetration Bug --- libs/auth.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libs/auth.js b/libs/auth.js index 81b43ba..d8a794a 100644 --- a/libs/auth.js +++ b/libs/auth.js @@ -234,7 +234,7 @@ module.exports = function(s,config,lang){ success() } } - if(params.auth && s.superUsersApi[params.auth]){ + if(params.auth && JSON.stringify(s.superUsersApi).indexOf(params.auth) > -1){ userFound = true userSelected = s.superUsersApi[params.auth].$user foundUser() -- GitLab