CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component…

published September 8, 2021

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00942 · 60.6th percentile
Published
2021-09-08T20:18Z
EPSS history
Timeline
  • 08 SEP 20:18Z
    Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component…
    cvelistv5