Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mwjm-9r99-f56x

Опубликовано: 28 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standard user account.

M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standard user account.

EPSS

Процентиль: 20%
0.00065
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8.8
ubuntu
11 дней назад

M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standard user account.

CVSS3: 8.8
nvd
11 дней назад

M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standard user account.

CVSS3: 8.8
debian
11 дней назад

M/Monit 3.7.4 contains a privilege escalation vulnerability that allow ...

EPSS

Процентиль: 20%
0.00065
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-863