Lucene search
K

4 matches found

Snyk
Snyk
added 2025/10/08 11:42 a.m.1 views

Missing Authorization

Overview melisplatform/melis-core is a Melis Platform Core module Affected versions of this package are vulnerable to Missing Authorization via the /melis/MelisCore/ToolUser/addNewUser endpoint. An attacker can gain unauthorized administrative access by sending a crafted request to this endpoint...

9.3CVSS7AI score0.00195EPSS
Exploits3References2
Vulnrichment
Vulnrichment
added 2025/10/08 10:46 a.m.1 views

CVE-2025-10352 Missing Authorization vulnerability in Melis Platform

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

9.3CVSS6.5AI score0.00195EPSS
Exploits3References2
Cvelist
Cvelist
added 2025/10/08 10:46 a.m.5 views

CVE-2025-10352 Missing Authorization vulnerability in Melis Platform

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

9.3CVSS0.00195EPSS
Exploits3References2
Zero Day Initiative
Zero Day Initiative
added 2022/10/27 12:0 a.m.23 views

Delta Industrial Automation InfraSuite Device Master AddNewUser Authentication Bypass Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Industrial Automation InfraSuite Device Master. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AddNewUser function. The issue results...

9.8CVSS3.5AI score0.00218EPSS
Exploits0References1
Rows per page
Query Builder