Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jgfv-5w6w-r347

Опубликовано: 31 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.

EPSS

Процентиль: 13%
0.00042
Низкий

8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 8
nvd
6 месяцев назад

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.

EPSS

Процентиль: 13%
0.00042
Низкий

8 High

CVSS3

Дефекты

CWE-269