CVE-2018-20519

2018-12-2715:00:00

mitre

www.cve.org

74cms

remote authentication

resumes modification

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajax_save_basic pid parameter.

References

github.com/coolboy0816/audit/issues/2