Lucene search
GoogleOSV:GHSA-JHQ3-57XH-6643HistoryAug 21, 2018 - 5:03 p.m.
Privilege Escalation due to Blind NoSQL Injection in flintcms
2018-08-2117:03:59
Google
osv.dev
8
EPSS
0.004
Percentile
73.9%
Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset.
Recommendation
Update to version 1.1.10 or later.
Related
github
github
Privilege Escalation due to Blind NoSQL Injection in flintcms
2018-08-21 17:03:59
cve
cve
CVE-2018-3783
2018-08-17 13:29:00
osv
osv
CVE-2018-3783
2018-08-17 13:29:00
veracode
veracode
Query Injection
2018-08-16 07:40:29
nodejs
nodejs
Privilege Escalation due to Blind NoSQL Injection
2018-08-16 19:44:22
nvd
nvd
CVE-2018-3783
2018-08-17 13:29:00
prion
prion
Design/Logic Flaw
2018-08-17 13:29:00
cvelist
cvelist
CVE-2018-3783
2018-08-17 13:00:00
hackerone
hackerone