Access Control Vulnerability in PbootCMS by PbootCMS Team
CVE-2020-22535

6.5MEDIUM

Key Information:

Vendor

Pbootcms

Status
Pbootcms
Vendor
CVE Published:
9 July 2021

What is CVE-2020-22535?

An incorrect access control vulnerability exists within PbootCMS version 2.0.6. This security flaw arises through the list parameter in the update function found in upgradecontroller.php, potentially allowing unauthorized access to sensitive functionalities of the content management system. Proper security measures must be implemented to mitigate the risks associated with this vulnerability.

References

https://github.com/Pbootcms/Pbootcms/issues/5
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.