← voltar
CVE-2017-20028

HumHub privileges management

CVSS 5.6 MEDIUMEPSS 0.8%CWE-269
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 5.6EPSS 0.8%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
09 jun 2022Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. It is recommended to upgrade the affected component.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
unspecified · HumHub

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →