Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wcm6-243c-86f3

Опубликовано: 04 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 9.8

Описание

EspoCRM 5.8.5 contains an authentication vulnerability that allows attackers to access other user accounts by manipulating authorization headers. Attackers can decode and modify Basic Authorization and Espo-Authorization tokens to gain unauthorized access to administrative user information and privileges.

EspoCRM 5.8.5 contains an authentication vulnerability that allows attackers to access other user accounts by manipulating authorization headers. Attackers can decode and modify Basic Authorization and Espo-Authorization tokens to gain unauthorized access to administrative user information and privileges.

EPSS

Процентиль: 21%
0.00067
Низкий

8.7 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 9.8
nvd
5 дней назад

EspoCRM 5.8.5 contains an authentication vulnerability that allows attackers to access other user accounts by manipulating authorization headers. Attackers can decode and modify Basic Authorization and Espo-Authorization tokens to gain unauthorized access to administrative user information and privileges.

EPSS

Процентиль: 21%
0.00067
Низкий

8.7 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-639