Описание
A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:magnussolution:magnusbilling:7.8.5.3:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00042
Низкий
8 High
CVSS3
Дефекты
CWE-269
Связанные уязвимости
CVSS3: 8
github
6 месяцев назад
A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.
EPSS
Процентиль: 13%
0.00042
Низкий
8 High
CVSS3
Дефекты
CWE-269