Lucene search
GoogleOSV:GHSA-48P3-XFVW-G59CHistoryMar 29, 2022 - 12:01 a.m.
Incorrect Access Control in ImpressCMS
2022-03-2900:01:16
Google
osv.dev
5
0.04 Low
EPSS
Percentile
92.0%
ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have a security token).
References
karmainsecurity.com/KIS-2022-03
seclists.org/fulldisclosure/2022/Mar/45
github.com/ImpressCMS/impresscms
github.com/ImpressCMS/impresscms/pull/967
github.com/ImpressCMS/impresscms/releases/tag/v1.4.3
hackerone.com/reports/1081137
nvd.nist.gov/vuln/detail/CVE-2021-26598
packetstormsecurity.com/files/166403/ImpressCMS-1.4.2-Incorrect-Access-Control.html
Related
osv
osv
CVE-2021-26598
2022-03-28 01:15:06
cvelist
cvelist
CVE-2021-26598
2022-03-28 00:31:42
zdt
zdt
ImpressCMS 1.4.2 Incorrect Access Control Vulnerability
2022-03-23 00:00:00
ImpressCMS 1.4.2 - Remote Code Execution Exploit
2022-03-30 00:00:00
cve
cve
CVE-2021-26598
2022-03-28 01:15:06
github
github
Incorrect Access Control in ImpressCMS
2022-03-29 00:01:16
prion
prion
Design/Logic Flaw
2022-03-28 01:15:00
nvd
nvd
CVE-2021-26598
2022-03-28 01:15:06
packetstorm
packetstorm
ImpressCMS 1.4.2 Incorrect Access Control
2022-03-22 00:00:00
ImpressCMS 1.4.2 Remote Code Execution
2022-03-23 00:00:00
nuclei
nuclei
ImpressCMS <1.4.3 - Incorrect Authorization
2022-04-03 02:23:45
exploitdb
exploitdb
ImpressCMS 1.4.2 - Remote Code Execution (RCE)
2022-03-30 00:00:00