Описание
PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors.
Ссылки
- Vendor Advisory
- PatchVendor Advisory
- Vendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.3 (включая)
Одно из
cpe:2.3:a:phparanoid:phparanoid:*:*:*:*:*:*:*:*
cpe:2.3:a:phparanoid:phparanoid:0.1:*:*:*:*:*:*:*
cpe:2.3:a:phparanoid:phparanoid:0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00294
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors.
EPSS
Процентиль: 52%
0.00294
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-264