Описание
An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:lopalopa:music_management_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 11%
0.00039
Низкий
4.2 Medium
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-284
Связанные уязвимости
CVSS3: 4.2
github
больше 1 года назад
An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details.
EPSS
Процентиль: 11%
0.00039
Низкий
4.2 Medium
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-284