Описание
Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.
Ссылки
- ExploitThird Party Advisory
- PatchVendor Advisory
- ExploitThird Party Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:rcos:submitty:22.06.00:*:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00236
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 5.3
github
больше 2 лет назад
Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.
EPSS
Процентиль: 46%
0.00236
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-862