Lucene search
GoogleOSV:GHSA-C2PJ-RR68-PW94HistoryJul 23, 2022 - 12:00 a.m.
Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin
2022-07-2300:00:15
Google
osv.dev
23
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
19.8%
An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Version 1.11.2 contains a patch for this issue.
Related
cve
cve
CVE-2022-34112
2022-07-22 23:15:08
github
github
prion
prion
Design/Logic Flaw
2022-07-22 23:15:00
osv
osv
CVE-2022-34112
2022-07-22 23:15:08
nvd
nvd
CVE-2022-34112
2022-07-22 23:15:08
cvelist
cvelist
CVE-2022-34112
2022-07-22 22:17:18
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
19.8%
Related for OSV:GHSA-C2PJ-RR68-PW94