Vulners
Lucene search
CVE-2020-12643
šļøĀ 31 Aug 2020Ā 14:24:01Reported byĀ mitreTypeĀ 
Ā cvešĀ web.nvd.nist.govšĀ 36Ā Viewsš WEB
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2020-12643 | 31 Aug 202018:55 | ā | circl |
 | OX App Suite Access Control Bypass Vulnerability | 1 Sep 202000:00 | ā | cnvd |
 | CVE-2020-12643 | 31 Aug 202014:24 | ā | cvelist |
 | EUVD-2020-4943 | 7 Oct 202500:30 | ā | euvd |
 | CVE-2020-12643 | 31 Aug 202015:15 | ā | nvd |
 | CVE-2020-12643 | 31 Aug 202015:15 | ā | osv |
 | OX App Suite / OX Documents XSS / SSRF / Bypass | 21 Aug 202000:00 | ā | packetstorm |
 | Design/Logic Flaw | 31 Aug 202015:15 | ā | prion |
 | CVE-2020-12643 | 22 May 202516:14 | ā | redhatcve |
Node
| Source | Link |
|---|---|
| seclists | www.seclists.org/fulldisclosure/2020/Aug/14 |
| open-xchange | www.open-xchange.com/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| subscription_id | path | /api/subscriptions | Incorrect permission checks on /api/subscriptions can expose subscription metadata for other users. | CWE-639 |
| user_id | path | /api/subscriptions | Incorrect permission checks on /api/subscriptions can expose subscription metadata for other users. | CWE-639 |
| user-agent | path | /login | Login rate-limiting logic can be bypassed by manipulating the user-agent string. | CWE-639 |
| content references | path | /apps/load | Endpoint accepts multiple content references which can be processed in a way that may cause issues if duplicates are not removed. | CWE-639 |
| account references | path | /folder/list | API used to trigger account-related actions that can reveal internal information when combined with other steps. | CWE-639 |
| external identifiers | path | /folder/list | API used to trigger account-related actions that can reveal internal information when combined with other steps. | CWE-639 |
Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Nov 2024 04:59Current
4.8Medium risk
Vulners AI Score4.8
CVSS 24
CVSS 3.14.3
EPSS0.00228