CVE-2019-11218

2019-04-2420:29:00

Google

osv.dev

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

42.3%

JSON

Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions.

References

bonobogitserver.com/changelog/#version-650

flab.cesnet.cz/advisories/cve-2019-11218