exploitDog

GHSA-c32p-hj2m-2vqp

Опубликовано: 14 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 8.8

Описание

An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/AuthManager/addToGroup.html that can endow administrator privileges.

An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/AuthManager/addToGroup.html that can endow administrator privileges.

Ссылки

EPSS

Процентиль: 35%

0.00141

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-352

Связанные уязвимости

CVE-2018-15197

CVSS3: 8.8

nvd

больше 7 лет назад

An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/AuthManager/addToGroup.html that can endow administrator privileges.

EPSS

Процентиль: 35%

0.00141

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-352