Lucene search

K
cvelistMitreCVELIST:CVE-2021-26598
HistoryMar 28, 2022 - 12:31 a.m.

CVE-2021-26598

2022-03-2800:31:42
mitre
www.cve.org
1

6 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.0%

ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have a security token).

6 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.0%