Lucene search
Veracode Vulnerability DatabaseVERACODE:7312HistoryAug 16, 2018 - 7:40 a.m.
Query Injection
2018-08-1607:40:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.004 Low
EPSS
Percentile
73.9%
flintcms is vulnerable to privilege escalation attacks. The library does not sanitize user input, allowing a malicious user to inject and execute arbitrary MongoDB queries through the password reset page.
Related
cve
cve
CVE-2018-3783
2018-08-17 13:29:00
osv
osv
Privilege Escalation due to Blind NoSQL Injection in flintcms
2018-08-21 17:03:59
CVE-2018-3783
2018-08-17 13:29:00
github
github
Privilege Escalation due to Blind NoSQL Injection in flintcms
2018-08-21 17:03:59
cvelist
cvelist
CVE-2018-3783
2018-08-17 13:00:00
prion
prion
Design/Logic Flaw
2018-08-17 13:29:00
hackerone
hackerone
nodejs
nodejs
Privilege Escalation due to Blind NoSQL Injection
2018-08-16 19:44:22
nvd
nvd
CVE-2018-3783
2018-08-17 13:29:00