Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qmfj-76r4-vwg3

Опубликовано: 20 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.This issue affects Rental Module: before 23.05.15.

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.This issue affects Rental Module: before 23.05.15.

EPSS

Процентиль: 5%
0.00021
Низкий

8.8 High

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.This issue affects Rental Module: before 23.05.15.

EPSS

Процентиль: 5%
0.00021
Низкий

8.8 High

CVSS3

Дефекты

CWE-639