CVE-2019-17605

A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candidate's account (by also exploiting…

published November 7, 2019

CVSS
—
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candidate's account (by also exploiting CVE-2019-17604) via a modified candidate id and an additional password parameter. The outcome is that the password of this other candidate is changed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01083 · 64.9th percentile
Published
2019-11-07T15:21Z
EPSS history
Timeline
  • 07 NOV 15:21Z
    A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candidate's account (by also exploiting…
    cvelistv5