Описание
openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mail_id value.
EPSS
Процентиль: 15%
0.00238
Низкий
Дефекты
CWE-639
Связанные уязвимости
github
около 2 месяцев назад
openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mail_id value.
EPSS
Процентиль: 15%
0.00238
Низкий
Дефекты
CWE-639