CVE-2020-5743

2020-05-0717:15:11

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don’t have permission.

CPENameOperatorVersion
tcexameq12.2.2
tcexameq12.1.29
tcexameq12.1.000
tcexameq14.0.1
tcexameq12.2.1
tcexameq14.1.3
tcexameq14.1.6
tcexameq12.1.011
tcexameq14.1.0
tcexameq12.1.004