CVE-2014-2866

2022-10-0316:20:48

mitre

www.cve.org

cve-2014-2866

access restrictions

client javascript

remote attackers

unspecified operations

code modification

6.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.4%

JSON

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on client JavaScript code for access restrictions, which allows remote attackers to perform unspecified operations by modifying this code.

References

www.kb.cert.org/vuls/id/437385