talelin/lin-cms-flask · Security
Lin CMS vulnerable to Improper Authentication
- GHSA ID
- GHSA-4vrc-q7m6-vq7w
- CVE ID
- CVE-2022-44244
- Severity
- medium
- Published
- Updated
- CVSS
- 6.6 · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 6.6 · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.
CWEs
- CWE-287 · Improper Authentication