Lucene search
Benoit Côté-JodoinNODEJS:689HistoryAug 16, 2018 - 7:44 p.m.
Privilege Escalation due to Blind NoSQL Injection
2018-08-1619:44:22
Benoit Côté-Jodoin
www.npmjs.com
12
0.004 Low
EPSS
Percentile
73.9%
Overview
Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset.
Recommendation
Update to version 1.1.10 or later.
References
Related
cve
cve
CVE-2018-3783
2018-08-17 13:29:00
osv
osv
Privilege Escalation due to Blind NoSQL Injection in flintcms
2018-08-21 17:03:59
CVE-2018-3783
2018-08-17 13:29:00
github
github
Privilege Escalation due to Blind NoSQL Injection in flintcms
2018-08-21 17:03:59
cvelist
cvelist
CVE-2018-3783
2018-08-17 13:00:00
prion
prion
Design/Logic Flaw
2018-08-17 13:29:00
hackerone
hackerone
veracode
veracode
Query Injection
2018-08-16 07:40:29
nvd
nvd
CVE-2018-3783
2018-08-17 13:29:00