CVE-2021-40616

thinkcmf v5.1.7 has an unauthorized vulnerability

published June 14, 2022

CVSS
—
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00762 · 54.9th percentile
Published
2022-06-14T09:55Z
EPSS history
Timeline
  • 14 JUN 09:55Z
    thinkcmf v5.1.7 has an unauthorized vulnerability
    cvelistv5