CVE-2020-27408

OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker t...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
report insinuator.net