CVE-2018-3783
N/A
N/A
Summary
A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| https://github.com/JasonEtco | flintcms | 1.1.10 | affected |
Weaknesses
- Privilege Escalation (CAPEC-233)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.