Lucene search
K

96 matches found

Vulnrichment
Vulnrichment
added 2024/07/19 12:0 a.m.11 views

CVE-2024-41600

Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component...

6.5AI score0.00445EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/19 12:0 a.m.5 views

PT-2024-29457 · Unknown · Lin-Cms Springboot

Name of the Vulnerable Software and Affected Versions: lin-CMS Springboot versions 0.2.1 and before Description: The issue allows a remote attacker to obtain sensitive information via the login method in the UserController.java component. Recommendations: For versions 0.2.1 and before, consider...

7.5CVSS6.8AI score0.00445EPSS
Exploits0References6
CVE
CVE
added 2024/07/19 12:0 a.m.56 views

CVE-2024-41601

CVE-2024-41601 affects lin-CMS versions 0.2.0 and earlier. The vulnerability is described as an insecure permissions issue in the UserController.java login path, allowing a remote attacker to obtain sensitive information. The provided documents identify the affected component and root cause but d...

7.5CVSS6.5AI score0.00453EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2022/11/10 12:1 p.m.5 views

io.github.talelin:lin-cms-spring-boot-autoconfigure (>=0.0.1-RC1 <=0.2.0-RELEASE), io.github.talelin:lin-cms-spring-boot-starter (>=0.0.1-RC1 <=0.2.0-RELEASE) potentially affected by CVE-2022-44244 via io.github.talelin:lin-cms-core (>=0.0.1-RC2 <=0.2.0-RELEASE)

io.github.talelin:lin-cms-core MAVEN version =0.0.1-RC2, =0.0.1-RC1, =0.0.1-RC1, =0.2.0-RELEASE Source cves: CVE-2022-44244 Source advisory: OSV:GHSA-4VRC-Q7M6-VQ7W...

6.6CVSS6.6AI score0.01016EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2022/11/10 12:1 p.m.22 views

Lin CMS vulnerable to Improper Authentication

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...

6.6CVSS6.8AI score0.01016EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2022/11/10 12:1 p.m.13 views

GHSA-4VRC-Q7M6-VQ7W Lin CMS vulnerable to Improper Authentication

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...

6.6CVSS6.8AI score0.01016EPSS
Exploits1References4
OSV
OSV
added 2022/11/09 10:15 p.m.4 views

CVE-2022-44244

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...

6.6CVSS5.8AI score0.01016EPSS
Exploits1References2
NVD
NVD
added 2022/11/09 10:15 p.m.30 views

CVE-2022-44244

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...

6.6CVSS0.01016EPSS
Exploits1References2
Prion
Prion
added 2022/11/09 10:15 p.m.21 views

Authentication flaw

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...

4.3CVSS6.8AI score0.01016EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/09 12:0 a.m.7 views

PT-2022-27147 · Lin-Cms · Lin-Cms

Name of the Vulnerable Software and Affected Versions: Lin-CMS version 0.2.1 Description: An authentication bypass in Lin-CMS allows attackers to escalate privileges to Super Administrator. Recommendations: For Lin-CMS version 0.2.1, at the moment, there is no information about a newer version th...

6.6CVSS6.6AI score0.01016EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2022/11/09 12:0 a.m.6 views

CVE-2022-44244

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...

7.3AI score0.01016EPSS
Exploits1References2
CVE
CVE
added 2022/11/09 12:0 a.m.96 views

CVE-2022-44244

CVE-2022-44244 is an authentication bypass in Lin-CMS v0.2.1 that allows attackers to escalate privileges to Super Administrator. Affected software: Lin-CMS version 0.2.1. Root cause/reason: authentication bypass enabling privilege escalation (no specific root cause details provided in the docume...

6.6CVSS6.7AI score0.01016EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/11/09 12:0 a.m.29 views

CVE-2022-44244

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...

7AI score0.01016EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/11/09 12:0 a.m.6 views

Lin CMS 授权问题漏洞

Lin CMS is a front-end and back-end separated CMS solution by TaleLin team. A security vulnerability exists in Lin CMS v0.2.1. An attacker exploited the vulnerability to escalate privileges to super administrator privileges...

6.6CVSS6.6AI score0.01016EPSS
Exploits1References3
vulnersOsv
vulnersOsv
added 2022/07/22 12:0 a.m.5 views

io.github.talelin:lin-cms-spring-boot-autoconfigure (>=0.0.1-RC1 <=0.2.0-RELEASE), io.github.talelin:lin-cms-spring-boot-starter (>=0.0.1-RC1 <=0.2.0-RELEASE) potentially affected by CVE-2022-32430 via io.github.talelin:lin-cms-core (>=0.0.1-RC2 <=0.2.0-RELEASE)

io.github.talelin:lin-cms-core MAVEN version =0.0.1-RC2, =0.0.1-RC1, =0.0.1-RC1, =0.2.0-RELEASE Source cves: CVE-2022-32430 Source advisory: OSV:GHSA-Q72P-4W56-HX7H...

7.5CVSS7.1AI score0.03634EPSS
Exploits1
OSV
OSV
added 2022/07/22 12:0 a.m.13 views

GHSA-Q72P-4W56-HX7H Hardcoded JWT Token in Lin CMS Spring Boot

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...

7.5CVSS7.4AI score0.03634EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/07/22 12:0 a.m.25 views

Hardcoded JWT Token in Lin CMS Spring Boot

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...

7.5CVSS6.7AI score0.03634EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2022/07/21 4:15 p.m.23 views

CVE-2022-32430

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...

7.5CVSS0.03634EPSS
Exploits1References2
OSV
OSV
added 2022/07/21 4:15 p.m.8 views

CVE-2022-32430

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...

7.5CVSS5.8AI score0.03634EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/21 4:15 p.m.3 views

CVE-2022-32430

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...

7.5CVSS7.1AI score0.03634EPSS
Exploits1References4
Rows per page
Query Builder