Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pv6x-3vgc-wphq

Опубликовано: 22 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuration, creating a user, uploading files, etc.

Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuration, creating a user, uploading files, etc.

EPSS

Процентиль: 29%
0.00104
Низкий

7.3 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.3
nvd
10 месяцев назад

Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuration, creating a user, uploading files, etc.

EPSS

Процентиль: 29%
0.00104
Низкий

7.3 High

CVSS3

Дефекты

CWE-284