Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6vvf-9qj9-6mw8

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and associated release codes. This could allow an attacker to generate print orders and release codes for documents they don´t own and print hem without authorization. In order to exploit this vulnerability, the user must have an account with wepanow.com or any of the institutions they serve, and be logged in.

WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and associated release codes. This could allow an attacker to generate print orders and release codes for documents they don´t own and print hem without authorization. In order to exploit this vulnerability, the user must have an account with wepanow.com or any of the institutions they serve, and be logged in.

EPSS

Процентиль: 25%
0.00083
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
около 3 лет назад

WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and associated release codes. This could allow an attacker to generate print orders and release codes for documents they don´t own and print hem without authorization. In order to exploit this vulnerability, the user must have an account with wepanow.com or any of the institutions they serve, and be logged in.

EPSS

Процентиль: 25%
0.00083
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-862