Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6vp2-fhw3-wvcx

Опубликовано: 25 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters . Authentication is required with OE_ADMIN role privilege.

OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters . Authentication is required with OE_ADMIN role privilege.

EPSS

Процентиль: 17%
0.00053
Низкий

8.8 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.7
nvd
больше 1 года назад

OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters . Authentication is required with OE_ADMIN role privilege.

EPSS

Процентиль: 17%
0.00053
Низкий

8.8 High

CVSS3

Дефекты

CWE-863