Code injection

2023-02-1522:15:00

PRIOn knowledge base

www.prio-n.com

code injection

niterforum

privilege escalation

security issue

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminController.java, allows attackers to gain escalated privileges.

CPENameOperatorVersion
niterforumeq2.5.0 beta

CPE	Name	Operator	Version
	niterforum	eq	2.5.0 beta

References

github.com/yourkevin/NiterForum/issues/25