Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37jg-qm7m-782r

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in.

Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in.

EPSS

Процентиль: 56%
0.00332
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-285
CWE-863

Связанные уязвимости

CVSS3: 5.3
nvd
больше 4 лет назад

Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in.

EPSS

Процентиль: 56%
0.00332
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-285
CWE-863