Lucene search
K

4 matches found

CVE
CVE
added 2024/01/10 12:0 a.m.48 views

CVE-2024-0356

CVE-2024-0356 affects Mandelo ssm_shiro_blog 1.0, specifically the Backend updateRoles function. Multiple connected sources describe an improper access control vulnerability in that function, with the vulnerability being publicly disclosed and exploitable. The root cause is not spelled out in all...

7.5CVSS7.6AI score0.00064EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/01/10 12:0 a.m.15 views

CVE-2024-0356 Mandelo ssm_shiro_blog Backend updateRoles access control

A vulnerability has been found in Mandelo ssmshiroblog 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateRoles of the component Backend. The manipulation leads to improper access controls. The exploit has been disclosed to the public a...

4.3CVSS7.8AI score0.00064EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/01/10 12:0 a.m.4 views

CVE-2024-0356 Mandelo ssm_shiro_blog Backend updateRoles access control

A vulnerability has been found in Mandelo ssmshiroblog 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateRoles of the component Backend. The manipulation leads to improper access controls. The exploit has been disclosed to the public a...

4.3CVSS7.7AI score0.00064EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/01/10 12:0 a.m.3 views

Mandelo ssm_shiro_blog Access Control Error Vulnerability

ssmshiroblog is a blogging system for mandelo individual developers. An access control error vulnerability exists in Mandelo ssmshiroblog version 1.0, which stems from the presence of an unknown function in updateRoles in the component Backend, leading to incorrect access control...

7.5CVSS6.8AI score0.00064EPSS
Exploits1References4
Rows per page
Query Builder