Описание
An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminController.java, allows attackers to gain escalated privileges.
Ссылки
- ExploitIssue TrackingVendor Advisory
- ExploitIssue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:niter:niterforum:2.5.0:beta:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00235
Низкий
8.8 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-284
Связанные уязвимости
CVSS3: 8.8
github
почти 3 года назад
An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminController.java, allows attackers to gain escalated privileges.
EPSS
Процентиль: 46%
0.00235
Низкий
8.8 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-284