CVE-2019-1010084

2019-07-1714:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to _ensure_auth() wrapper result in authentication-checking not being applied to al routes.

CPENameOperatorVersion
dancer-plugin-simplecrudeq0.92
dancer-plugin-simplecrudeq0.03
dancer-plugin-simplecrudeq1.10
dancer-plugin-simplecrudeq0.02
dancer-plugin-simplecrudeq0.04
dancer-plugin-simplecrudeq0.40
dancer-plugin-simplecrudeq0.97
dancer-plugin-simplecrudeq0.70
dancer-plugin-simplecrudeq0.93
dancer-plugin-simplecrudeq0.71

Name	Operator	Version
dancer-plugin-simplecrud	eq	0.92
dancer-plugin-simplecrud	eq	0.03
dancer-plugin-simplecrud	eq	1.10
dancer-plugin-simplecrud	eq	0.02
dancer-plugin-simplecrud	eq	0.04
dancer-plugin-simplecrud	eq	0.40
dancer-plugin-simplecrud	eq	0.97
dancer-plugin-simplecrud	eq	0.70
dancer-plugin-simplecrud	eq	0.93
dancer-plugin-simplecrud	eq	0.71