CVE-2020-18741

Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D"…

published July 8, 2021

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00940 · 60.6th percentile
Published
2021-07-08T16:29Z
EPSS history
Timeline
  • 08 JUL 16:29Z
    Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D"…
    cvelistv5