CVE-2020-6949

2020-01-1318:58:45

mitre

www.cve.org

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.2%

JSON

A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user’s account, or otherwise reconfigure that account.

References

github.com/HashBrownCMS/hashbrown-cms/issues/327