Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6j5x-7wrv-w5qh

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account.

A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account.

EPSS

Процентиль: 53%
0.00299
Низкий

Связанные уязвимости

CVSS3: 8.8
nvd
около 6 лет назад

A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account.

EPSS

Процентиль: 53%
0.00299
Низкий