Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rhvx-hr6c-q6qj

Опубликовано: 22 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.8

Описание

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.

EPSS

Процентиль: 16%
0.00051
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-425

Связанные уязвимости

CVSS3: 5.8
nvd
5 месяцев назад

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.

EPSS

Процентиль: 16%
0.00051
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-425