CVE-2017-9378

2017-06-0215:00:00

mitre

www.cve.org

bigtree cms

user deletion

admin control

EPSS

0.001

Percentile

24.8%

JSON

BigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could have security relevance because deletion was supposed to be an admin-only action, and the admin may have other tasks (such as data backups) to complete before a user is deleted.