Privilege Escalation

2022-05-1710:05:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

57.2%

JSON

facturascripts/facturascripts is vulnerable to privilege escalation. The vulnerability exists in the newUserPassword function in AppController.php due to a lack of validation in the password field which allows an unauthorized user to access the user account.

CPENameOperatorVersion
facturascripts/facturascriptslev2021.81
facturascripts/facturascriptslev2021.81

CPE	Name	Operator	Version
	facturascripts/facturascripts	le	v2021.81
	facturascripts/facturascripts	le	v2021.81

References

github.com/advisories/GHSA-vjq3-x3f2-fvxq

github.com/neorazorx/facturascripts/commit/714bebf4c35e3eedda138f5ee912a8031bc8b1ab

huntr.dev/bounties/58918962-ccb5-47f9-bb43-ffd8cae1ef24

huntr.dev/bounties/58918962-ccb5-47f9-bb43-ffd8cae1ef24/

0.002 Low

EPSS

Percentile

57.2%

JSON

Related for VERACODE:35572