Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-20580
HistoryMar 14, 2022 - 12:00 a.m.

Yzmcms access control error vulnerability

2022-03-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.001 Low

EPSS

Percentile

45.6%

Yzmcms is an open source CMS (Content Management System) for Yzmcms personal developers. v6.3 of Yzmcms contains an access control error vulnerability that stems from the application’s lack of user login status authentication before accessing a personal homepage. An attacker could use this vulnerability to construct a special request to access another user’s home page without login status and obtain sensitive information.

CPENameOperatorVersion
yzmcms yzmcms veq6.3

0.001 Low

EPSS

Percentile

45.6%

Related for CNVD-2022-20580