Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5452-v6vj-cqv6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created the dashboard.

Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created the dashboard.

EPSS

Процентиль: 64%
0.00473
Низкий

Связанные уязвимости

CVSS3: 9.8
nvd
около 6 лет назад

Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created the dashboard.

EPSS

Процентиль: 64%
0.00473
Низкий