CVE-2020-10793

🗓️ 23 Mar 2020 14:12:20Reported by mitreType

CVE-2020-10793 allows remote attackers to gain privileges via modified Email ID to "Select Role of the User" page. A contributor to the CodeIgniter framework argues that the issue should not be attributed to CodeIgniter. An unknown website built with CodeIgniter framework is stated, but CodeIgniter is not responsible. Another reporter indicates the issue is with a custom module/plugin to CodeIgniter, not CodeIgniter itself

Reporter	Title	Published	Views	Family All 9
CNVD	CodeIgniter Elevation of Privilege Vulnerability	24 Mar 202000:00	–	cnvd
Cvelist	CVE-2020-10793	23 Mar 202014:12	–	cvelist
EUVD	EUVD-2022-4450	3 Oct 202520:07	–	euvd
Github Security Blog	CodeIgniter Improper Privilege Management	24 May 202217:12	–	github
NVD	CVE-2020-10793	23 Mar 202015:15	–	nvd
OSV	BIT-CODEIGNITER-2020-10793	6 Mar 202410:54	–	osv
OSV	GHSA-JWQP-WH5G-4GMM CodeIgniter Improper Privilege Management	24 May 202217:12	–	osv
Prion	Design/Logic Flaw	23 Mar 202015:15	–	prion
Positive Technologies	PT-2020-12327 · Ellislab · Codeigniter	23 Mar 202000:00	–	ptsecurity

NVD

Node

codeigniter codeigniterRange≤4.0.0

Source	Link
medium	www.medium.com/%40vbharad/account-takeover-via-modifying-email-id-codeigniter-framework-ca30741ad297
codeigniter4	www.codeigniter4.github.io/userguide/extending/authentication.html

21 Nov 2024 04:56Current

8.7High risk

Vulners AI Score8.7

CVSS 26.5

CVSS 3.18.8

EPSS0.00538

CWE-269