Lucene search
PRIOn knowledge basePRION:CVE-2019-15953HistorySep 05, 2019 - 7:16 p.m.
Privilege escalation
2019-09-0519:16:00
PRIOn knowledge base
www.prio-n.com
2
An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertical and horizontal privilege escalation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| total.js_cms | eq | 12.0.0 |
Related
github
github
Total.js CMS Unauthorized Access
2022-05-24 16:55:31
cve
cve
CVE-2019-15953
2019-09-05 19:16:31
cvelist
cvelist
CVE-2019-15953
2019-09-05 18:31:53
osv
osv
Total.js CMS Unauthorized Access
2022-05-24 16:55:31
nvd
nvd
CVE-2019-15953
2019-09-05 19:16:31