PT-2018-14808

Name of the Vulnerable Software and Affected Versions tianti version 2.3 Description The issue allows remote authenticated users to bypass intended permission restrictions. This can be achieved by visiting the "tianti-module-admin/cms/column/list" endpoint directly, which enables the user to read...

CVE-2018-19109: Direct Request

tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column...