Описание
1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endpoints without method-level permission checks, allowing a low-privileged authenticated user to access functionality intended for authorized administrators.
EPSS
Процентиль: 27%
0.00339
Низкий
8.1 High
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 8.1
github
8 дней назад
1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endpoints without method-level permission checks, allowing a low-privileged authenticated user to access functionality intended for authorized administrators.
EPSS
Процентиль: 27%
0.00339
Низкий
8.1 High
CVSS3
Дефекты
CWE-862