Описание
Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.
Ссылки
- ExploitThird Party Advisory
- PatchVendor Advisory
- ExploitThird Party Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:rcos:submitty:22.06.00:*:*:*:*:*:*:*
EPSS
Процентиль: 40%
0.00505
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 5.3
github
почти 3 года назад
Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.
EPSS
Процентиль: 40%
0.00505
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-862