Описание
OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator. Fixed in eCASE Platform 11.14.1.0.
Уязвимые конфигурации
Конфигурация 1Версия до 11.14.1.0 (исключая)
cpe:2.3:a:opexustech:ecase_audit:*:*:*:*:*:*:*:*
EPSS
Процентиль: 12%
0.0004
Низкий
7.6 High
CVSS3
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 7.6
github
30 дней назад
OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator. Fixed in eCASE Platform 11.14.1.0.
EPSS
Процентиль: 12%
0.0004
Низкий
7.6 High
CVSS3
Дефекты
CWE-863