CVE-2020-23722

2021-03-1014:15:12

Google

osv.dev

fuel cms

privilege escalation

super admin

vulnerability

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

39.5%

JSON

An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to obtain super admin privilege via the “id” and “fuel_id” parameters.

References

github.com/daylightstudio/FUEL-CMS/issues/560