Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-73hh-p4j2-j7gj

Опубликовано: 19 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.

OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.

EPSS

Процентиль: 56%
0.00341
Низкий

7.5 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.

EPSS

Процентиль: 56%
0.00341
Низкий

7.5 High

CVSS3

Дефекты

CWE-284