Design/Logic Flaw

2023-01-2621:16:00

PRIOn knowledge base

www.prio-n.com

rawchen blog-ssm

security flaw

permission bypass

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

JSON

An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserList component.

CPENameOperatorVersion
blog-ssmeq1.0

CPE	Name	Operator	Version
	blog-ssm	eq	1.0

References

github.com/rawchen/blog-ssm/issues/5