Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-75c8-h7q2-4h5c

Опубликовано: 12 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload.

An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload.

EPSS

Процентиль: 47%
0.00239
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 4.3
nvd
почти 2 года назад

An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload.

EPSS

Процентиль: 47%
0.00239
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-285