Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5x4q-5j7v-9cc2

Опубликовано: 24 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users.

Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users.

EPSS

Процентиль: 43%
0.00207
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
больше 3 лет назад

Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users.

EPSS

Процентиль: 43%
0.00207
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862