CVE-2023-27095
6.5MEDIUMInsecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module.
Опубликовано: 3/16/2023Обновлено: 2/26/2025
Описание
Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module.
ИИ-АнализНа базе ИИ
Затронутые продукты
opengoofyhippo4j
Ссылки
- https://github.com/opengoofy/hippo4j/issues/1061ExploitIssue TrackingThird Party Advisory
- https://github.com/opengoofy/hippo4j/issues/1061ExploitIssue TrackingThird Party Advisory