CVE-2014-125054CWE-284

koroket RedditOnRails Vote access control

Medium · published January 7, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
47.3
In the wild
Unconfirmed
What it is

A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The patch is identified as 7f3c7407d95d532fcc342b00d68d0ea09ca71030. It is recommended to apply a patch to fix this issue. VDB-217594 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00586 · 47.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-01-07T08:45Z
EPSS history
Timeline
  • 07 JAN 08:45Z
    koroket RedditOnRails Vote access control
    cvelistv5