Описание
OneUptime is a solution for monitoring and managing online services. In version 9.0.5598, a low-permission user can create new accounts through a direct API request instead of being restricted to the intended interface. This issue has been patched in version 9.1.0.
Ссылки
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:hackerbay:oneuptime:9.0.5598:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00061
Низкий
8.1 High
CVSS3
Дефекты
CWE-285
Связанные уязвимости
EPSS
Процентиль: 19%
0.00061
Низкий
8.1 High
CVSS3
Дефекты
CWE-285