CVE-2021-26598

ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have…

published March 28, 2022

CVSS

—

EPSS

11%

Percentile

95.8

In the wild

Unconfirmed

What it is

ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have a security token).

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.10528 · 95.8th percentile
Published: 2022-03-28T00:31Z

EPSS history

Timeline

28 MAR 00:31Z
ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have…
cvelistv5