Lucene search

GitHub Advisory DatabaseGHSA-2M9R-PM7Q-WR6F

HistoryMay 17, 2022 - 12:53 a.m.

GeniXCMS denial of service (account blockage)

2022-05-1700:53:05

CWE-20

GitHub Advisory Database

github.com

genixcms

denial of service

account blockage

software vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships, such as the admin<script> username versus the admin username, related to register.php, User.class.php, and Type.class.php.

Affected configurations

Vulners

Node

genixcmsRange<1.1.0

VendorProductVersionCPE
genixcms*cpe:2.3:a:genix:cms:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
genix	cms	*	cpe:2.3:a:genix:cms::::::::

References

github.com/advisories/GHSA-2m9r-pm7q-wr6f

github.com/semplon/GeniXCMS/commit/e0ad60b2bb967fa3f63c35b92afe84c5f3b31009

github.com/semplon/GeniXCMS/issues/78

github.com/semplon/GeniXCMS/releases/tag/v1.1.0

nvd.nist.gov/vuln/detail/CVE-2017-14231

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

Related for GHSA-2M9R-PM7Q-WR6F