Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hjg5-r3cj-8vc3

Опубликовано: 13 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This could allow an attacker to perform unintended actions resulting in escalation of privileges which has low impact on confidentiality and integrity with no impact on availibility of the system.

S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This could allow an attacker to perform unintended actions resulting in escalation of privileges which has low impact on confidentiality and integrity with no impact on availibility of the system.

EPSS

Процентиль: 35%
0.00147
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This could allow an attacker to perform unintended actions resulting in escalation of privileges which has low impact on confidentiality and integrity with no impact on availibility of the system.

EPSS

Процентиль: 35%
0.00147
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-862