Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-35r4-97wh-88x3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.

EPSS

Процентиль: 86%
0.02924
Низкий

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 4.3
nvd
почти 5 лет назад

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.

EPSS

Процентиль: 86%
0.02924
Низкий

Дефекты

CWE-287