Описание
An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user, including administrators.
Ссылки
- ProductBroken Link
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 13.6.07 (включая)
cpe:2.3:a:zwiicms:zwiicms:*:*:*:*:*:*:*:*
EPSS
Процентиль: 47%
0.00238
Низкий
8.3 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 8.3
github
3 месяца назад
An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user, including administrators.
EPSS
Процентиль: 47%
0.00238
Низкий
8.3 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-284