CVE-2019-11218

Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated…

published April 24, 2019

CVSS
—
EPSS
1%
Percentile
66.8
In the wild
Unconfirmed
What it is

Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01159 · 66.8th percentile
Published
2019-04-24T19:21Z
EPSS history
Timeline
  • 24 APR 19:21Z
    Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated…
    cvelistv5