Описание
Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:mesbook:mesbook:20221021.03:*:*:*:*:*:*:*
EPSS
Процентиль: 32%
0.00126
Низкий
8.1 High
CVSS3
7.1 High
CVSS3
Дефекты
CWE-200
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 8.1
github
больше 1 года назад
Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.
EPSS
Процентиль: 32%
0.00126
Низкий
8.1 High
CVSS3
7.1 High
CVSS3
Дефекты
CWE-200
NVD-CWE-noinfo