CVE-2012-3473

The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote…

published August 12, 2012

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02333 · 83.3th percentile
Published
2012-08-12T21:00Z
EPSS history
Timeline
  • 12 AUG 21:00Z
    The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote…
    cvelistv5