CVE-2022-38935

2023-02-1500:00:00

mitre

www.cve.org

niterforum

2.5.0-beta

escalated privileges

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminController.java, allows attackers to gain escalated privileges.

References

github.com/yourkevin/NiterForum/issues/25