Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wxm7-hj84-7p5w

Опубликовано: 15 дек. 2021
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.

An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.

EPSS

Процентиль: 65%
0.00501
Низкий

8.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 8.8
nvd
около 4 лет назад

An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.

EPSS

Процентиль: 65%
0.00501
Низкий

8.8 High

CVSS3

Дефекты

CWE-269