Lucene search
GoogleOSV:GHSA-3H2Q-M63Q-9CF6HistoryMay 24, 2022 - 5:28 p.m.
Missing permission check in Perfecto Plugin
2022-05-2417:28:26
Google
osv.dev
7
0.001 Low
EPSS
Percentile
22.2%
Perfecto Plugin 1.17 and earlier does not perform a permission check in a method implementing a connection test.
This allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified username and password.
Perfecto Plugin 1.18 requires Overall/Administer permission to perform a connection test.
Related
cve
cve
CVE-2020-2260
2020-09-16 14:15:13
osv
osv
CVE-2020-2260
2020-09-16 14:15:13
prion
prion
Design/Logic Flaw
2020-09-16 14:15:00
nvd
nvd
CVE-2020-2260
2020-09-16 14:15:13
github
github
Missing permission check in Perfecto Plugin
2022-05-24 17:28:26
cvelist
cvelist
CVE-2020-2260
2020-09-16 13:20:42