Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-27095
6.5
MEDIUMCVSS v3
Published
March 16, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module.
opengoofy/hippo4j
GitHub📌 异步线程池框架，支持线程池动态变更&监控&报警，无需修改代码轻松引入。Asynchronous thread pool framework, support Thread Pool Dynamic Change & monitoring & Alarm, no need to modify the code easily introduced.
GitHub📌 异步线程池框架，支持线程池动态变更&监控&报警，无需修改代码轻松引入。Asynchronous thread pool framework, support Thread Pool Dynamic Change & monitoring & Alarm, no need to modify the code easily introduced.< 1.4.3NVD