CVE-2020-6949

A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3

published January 13, 2020

CVSS
—
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01281 · 69.8th percentile
Published
2020-01-13T18:58Z
EPSS history
Timeline
  • 13 JAN 18:58Z
    A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3
    cvelistv5