CVE-2023-27088

feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java

High · published March 8, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform operations within the permission of the admin super administrator and can use this vulnerability to change the blacklist IP address in the system at will.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00604 · 48.2th percentile
Published
2023-03-08T00:00Z
EPSS history
Timeline
  • 08 MAR 00:00Z
    feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java
    cvelistv5