CVE-2020-8439

Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated…

published March 7, 2020

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated by login=victim to the users/21/edit URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01589 · 75.4th percentile
Published
2020-03-07T00:26Z
EPSS history
Timeline
  • 07 MAR 00:26Z
    Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated…
    cvelistv5