Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35662
HistoryMay 24, 2022 - 3:32 a.m.

Improper Access Control

2022-05-2403:32:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
publify_core
vulnerability
access control
user permissions
unauthorized user
data modification

EPSS

0.001

Percentile

21.4%

publify_core is vulnerable to improper access control. The vulnerability exists in the update function in content_controller.rb due to improper validation of user permissions which allows an unauthorized user to modify the data in the system.

EPSS

0.001

Percentile

21.4%