GitHub Advisoryadvisory · PyPI, Maven
GHSA-4vrc-q7m6-vq7w Lin CMS vulnerable to Improper Authentication
MEDIUM
Official page ↗
- Aliases
- CVE-2022-44244
- Ecosystem
- PyPI, Maven
- Packages
- Lin-CMS, io.github.talelin:lin-cms-core
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-287
- Reviewed
- 2022-11-22
Affected packages
• PyPI Lin-CMS: <= 0.2.1 (no fix yet)
• Maven io.github.talelin:lin-cms-core: <= 0.2.1 (no fix yet)
Description
An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.
Related
Alias · CVE (1)
- CVE-2022-44244 An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator. vulnerability
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness