Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-28jm-43f2-h9jm

Опубликовано: 30 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 4.3

Описание

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers.

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers.

EPSS

Процентиль: 9%
0.00032
Низкий

7.1 High

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 4.3
nvd
около 2 месяцев назад

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers.

EPSS

Процентиль: 9%
0.00032
Низкий

7.1 High

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-639