CVE-2022-45276

An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...

CVE-2022-45276

creationtimestamp| type| source ---|---|--- 2022-11-24 00:14:10+00:00| seen| https://t.me/cibsecurity/53462...

CVE-2022-45276

An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...

CVE-2022-45276

CVE-2022-45276 affects YJCMS v1.0.9. The issue resides in the /index/user/user_edit.html component, enabling unauthenticated attackers to obtain the Administrator account password. Severity per CVSS v3.1 is CRITICAL (9.8/10) with network access, low attack complexity, and no privileges required, ...