Описание
Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated user without privileges to list and access other user data, use user creation, modification, and deletion features, and escalate privileges by impersonating other users of the application in the generation and signing of documents.
Ссылки
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.7.139 (исключая)Версия до 1.9.2 (исключая)
Одно из
cpe:2.3:a:viafirma:documents:*:*:*:*:*:-:*:*
cpe:2.3:a:viafirma:documents_compose:*:*:*:*:*:*:*:*
EPSS
Процентиль: 9%
0.00032
Низкий
8.1 High
CVSS3
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 8.1
github
27 дней назад
Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated user without privileges to list and access other user data, use user creation, modification, and deletion features, and escalate privileges by impersonating other users of the application in the generation and signing of documents.
EPSS
Процентиль: 9%
0.00032
Низкий
8.1 High
CVSS3
Дефекты
CWE-863