Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
Coherence ProjectCoherence

1 matches found

CVE
CVE•added 2018/12/20 9:0 a.m.•43 views

CVE-2018-20301

Coherence before 0.5.2 is affected by a Mass Assignment-style vulnerability where registration endpoints can update any coherence_fields data. The CVE-2018-20301 entry (Steve Pallen Coherence) specifies that users could, for example, set the confirmed_at parameter in a registration request to aut...

6.5CVSS6.3AI score0.00896EPSS