A weakness has been identified in Presenton up to 0.9.11-beta.
A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Product
- Presenton
- CVSS v3.1
- 7.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weakness
- CWE-287, CWE-306
- NVD status
- Received
Why it ranks 25 (Notable)
- CVSS v3.1 7.3 high
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.