Lucene search
CVE-2021-29452
a12n-server npm package v0.18.0 allows unauthorized user editin
Show more
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2021-29452 | 16 Apr 202122:15 | – | nvd |
 | Any logged in user could edit any other logged in user. | 19 Apr 202115:14 | – | osv |
| CVE-2021-29452 | 16 Apr 202122:15 | – | osv |
 | CVE-2021-29452 Any logged in user could edit any other logged in user. | 16 Apr 202121:35 | – | cvelist |
 | Any logged in user could edit any other logged in user. | 19 Apr 202115:14 | – | github |
 | Authentication flaw | 16 Apr 202122:15 | – | prion |
 | Insecure Access Controls | 19 Apr 202106:09 | – | veracode |
Node
[
{
"product": "a12n-server",
"vendor": "curveball",
"versions": [
{
"status": "affected",
"version": ">= 0.18 < 0.18.2"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo16 Apr 2021 22:15Current
7High risk
Vulners AI Score7
CVSS24
CVSS36.5 - 8.1
EPSS0.00248