Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-43g3-jf9m-f6f5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.

Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.

EPSS

Процентиль: 54%
0.00314
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-306
CWE-863

Связанные уязвимости

CVSS3: 5.3
nvd
больше 4 лет назад

Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.

EPSS

Процентиль: 54%
0.00314
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-306
CWE-863