Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-62qm-m6wg-jvqw

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.

The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.

EPSS

Процентиль: 71%
0.00681
Низкий

Связанные уязвимости

CVSS3: 9.8
nvd
около 6 лет назад

The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.

EPSS

Процентиль: 71%
0.00681
Низкий