Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-25ww-mhx2-69ff

Опубликовано: 10 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 7.5

Описание

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp.

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp.

EPSS

Процентиль: 10%
0.00036
Низкий

6.9 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 7.5
nvd
5 месяцев назад

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp.

EPSS

Процентиль: 10%
0.00036
Низкий

6.9 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-639