exploitDog

CVE-2018-19620

Опубликовано: 28 нояб. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.

Ссылки

https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/IncorrectAccessControl#0x02-modify
Exploit
Third Party Advisory
https://github.com/star7th/showdoc/commit/bcdb5e3519285bdf81e618b3c9b90d22bc49e13c
Patch
https://github.com/star7th/showdoc/issues/397
Issue Tracking
https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/IncorrectAccessControl#0x02-modify
Exploit
Third Party Advisory
https://github.com/star7th/showdoc/commit/bcdb5e3519285bdf81e618b3c9b90d22bc49e13c
Patch
https://github.com/star7th/showdoc/issues/397
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:showdoc:showdoc:2.4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00132

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-425

Связанные уязвимости

GHSA-pfrc-5hhq-6hvr

CVSS3: 4.3

github

больше 3 лет назад

Showdoc Unauthenticated Access

EPSS

Процентиль: 33%

0.00132

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-425