Описание
Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators.
Ссылки
- ExploitThird Party Advisory
- Product
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:oretnom23:customer_support_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 59%
0.00389
Низкий
8.8 High
CVSS3
7.2 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-284
Связанные уязвимости
CVSS3: 7.2
github
почти 2 года назад
Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators.
EPSS
Процентиль: 59%
0.00389
Низкий
8.8 High
CVSS3
7.2 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-284