Lucene search

K
osvGoogleOSV:CVE-2021-26598
HistoryMar 28, 2022 - 1:15 a.m.

CVE-2021-26598

2022-03-2801:15:06
Google
osv.dev
1

5.3 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.0%

ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have a security token).

5.3 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.0%