CVE-2021-34164

2023-02-1700:00:00

mitre

www.cve.org

vulnerability

lizhifaka

authenticated

arbitrary commands

set password

admin/index/email

permissions

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location.

References

github.com/lizhipay/faka/issues/22