Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mphv-4vx5-5cr8

Опубликовано: 03 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

EPSS

Процентиль: 30%
0.0011
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 9.1
nvd
11 месяцев назад

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

EPSS

Процентиль: 30%
0.0011
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-862