Vvveb CMS Admin API Token IDOR Vulnerability

Vvveb, a CMS with page builder for websites, blogs, and ecommerce stores, is affected by an authenticated IDOR vulnerability in the admin/auth-token endpoint.

Prior to version 1.0.8.7, any administrator can read and overwrite another administrator's API tokens.

• Affected versions: before 1.0.8.7
• Patched version: 1.0.8.7