Lucene search
+L

1 matches found

CVE
CVE
added 2014/01/26 1:00 a.m.68 views

CVE-2013-7137

CVE-2013-7137 affects Burden prior to 1.8.1. The vulnerability arises from insufficient validation of the burden_user_rememberme cookie, allowing remote unauthenticated users to set the cookie to 1 and gain administrative privileges via the login mechanism. Impact is authentication bypass with po...

9.8CVSS9.6AI score0.16075EPSS
SaveWeb