CVE-2022-27960

2022-04-1021:01:39

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users’ personal information.

References

gitee.com/oufu/ofcms/issues/I4Z8SS