Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5f4h-2wr9-wfg6

Опубликовано: 30 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 4.3

Описание

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to time records details using unauthorised internal identifiers.

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to time records details using unauthorised internal identifiers.

EPSS

Процентиль: 11%
0.00037
Низкий

7.1 High

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 4.3
nvd
4 месяца назад

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to time records details using unauthorised internal identifiers.

EPSS

Процентиль: 11%
0.00037
Низкий

7.1 High

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-639