Lucene search
GoogleOSV:GHSA-JHQ3-57XH-6643HistoryAug 21, 2018 - 5:03 p.m.
Privilege Escalation due to Blind NoSQL Injection in flintcms
2018-08-2117:03:59
Google
osv.dev
6
0.004 Low
EPSS
Percentile
73.9%
Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset.
Recommendation
Update to version 1.1.10 or later.
Related
osv
osv
CVE-2018-3783
2018-08-17 13:29:00
cve
cve
CVE-2018-3783
2018-08-17 13:29:00
github
github
Privilege Escalation due to Blind NoSQL Injection in flintcms
2018-08-21 17:03:59
prion
prion
Design/Logic Flaw
2018-08-17 13:29:00
cvelist
cvelist
CVE-2018-3783
2018-08-17 13:00:00
hackerone
hackerone
nodejs
nodejs
Privilege Escalation due to Blind NoSQL Injection
2018-08-16 19:44:22
veracode
veracode
Query Injection
2018-08-16 07:40:29
nvd
nvd
CVE-2018-3783
2018-08-17 13:29:00