CVE-2018-19109

xujeff/tianti

on github

Published

November 8, 2018

Severity

CVSS v3:

8.8 HIGH

CVSS v2:

6.5 MEDIUM

Description

tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column.

References

https://github.com/xujeff/tianti/issues/29

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:tianti_project:tianti:2.3:::::::*	n/a	n/a	2.3

External Links

NVD - CVE-2018-19109