CVE-2015-10033

jvvlee MerlinsBoard Grade improper authorization

CVSS 3.5 LOWEPSS 0.7%CWE-285

Vexday Risk Score

8Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 3.5EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

09 jan 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade Handler. The manipulation leads to improper authorization. The identifier of the patch is 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5. It is recommended to apply a patch to fix this issue. The identifier VDB-217713 was assigned to this vulnerability.

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Produtos afetados

jvvlee · MerlinsBoard

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/jvvlee/MerlinsBoard/commit/134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5 https://vuldb.com/?ctiid.217713 https://vuldb.com/?id.217713