Описание
An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/installation/createuserinfo requests, resulting in account creation.
Ссылки
- ExploitVendor Advisory
- ExploitThird Party AdvisoryVDB Entry
- ExploitVendor Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cobub:razor:0.7.2:*:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.17299
Средний
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-287
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/installation/createuserinfo requests, resulting in account creation.
EPSS
Процентиль: 95%
0.17299
Средний
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-287