CVE-2019-11218

2019-04-2419:21:27

mitre

www.cve.org

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

42.3%

JSON

Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions.

References

bonobogitserver.com/changelog/#version-650

flab.cesnet.cz/advisories/cve-2019-11218