CVE-2022-36521

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts...

CVE-2024-29402

cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity...

CVE-2024-29402

cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity...

cskefu 安全漏洞

cskefu Chunsong Customer Service is an open source, free intelligent customer service system open-sourced by Chatopera in China. A security vulnerability exists in cskefu version v7, which stems from an insufficient session expiration check, allowing an attacker to exploit old sessions for...

CVE-2024-29402

cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity...

PT-2024-22883 · Cskefu · Cskefu

Name of the Vulnerable Software and Affected Versions: cskefu version 7 Description: The issue is related to Insufficient Session Expiration, which allows attackers to exploit old sessions for malicious activity. Recommendations: For cskefu version 7, consider implementing proper session expirati...

CVE-2024-29402

CVE-2024-29402 affects cskefu v7 and is caused by Insufficient Session Expiration, enabling an attacker to exploit an old session for malicious activity. Original and connected sources (NVD, Red Hat, CVE list, CNNVD, PTSecurity) confirm the vulnerability and its basic impact profile: CVSS v3.1 ba...

CVE-2024-29402

cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity...

CVE-2022-36521

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts...

CVE-2022-36521

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts...

Code injection

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts...

CVE-2022-36521

CVE-2022-36521 affects cskefu v7.0.1, where insecure permissions allow unauthenticated attackers to arbitrarily add administrator accounts. The issue is rooted in permission checks within the application, enabling privilege escalation at the admin-creation step. Multiple sources (NVD/Red Hat/CVE ...

CVE-2022-36521

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts...

CVE-2022-36521

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts...

cskefu 访问控制错误漏洞

cskefu Chunsong Customer Service is an open source, free intelligent customer service system open source by China Chatopera. A security vulnerability exists in cskefu version v7.0.1, which stems from an insecure permission restriction. An attacker exploiting this vulnerability can arbitrarily add...

PT-2022-23442 · Cskefu · Cskefu

Name of the Vulnerable Software and Affected Versions: cskefu version 7.0.1 Description: The issue is related to insecure permissions, allowing unauthenticated attackers to add administrator accounts arbitrarily. Recommendations: For cskefu version 7.0.1, update to a version that addresses the...