Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jxq-w8rh-485r

Опубликовано: 11 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.

Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.

EPSS

Процентиль: 24%
0.00079
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.4
nvd
12 месяцев назад

Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.

EPSS

Процентиль: 24%
0.00079
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862