CVEvulnerability

CVE-2014-2866

10.0 HIGH Published 2014-04-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on client JavaScript code for access restrictions, which allows remote attackers to perform unspecified operations by modifying this code.

Affected configurations

• paperthin commonspot content server (<= 7.0.1) • paperthin commonspot content server 8.0.0 • paperthin commonspot content server 8.0.1 • paperthin commonspot content server 8.0.2

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References