Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qq49-hmp5-gwv6

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.

EPSS

Процентиль: 59%
0.00387
Низкий

Связанные уязвимости

nvd
больше 12 лет назад

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.

debian
больше 12 лет назад

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cac ...

EPSS

Процентиль: 59%
0.00387
Низкий