CVE-2022-23383

Katalog CVE

CVSS 9.1 · Critical EPSS 1,2%

Kerentanan Improper Authentication pada yzmcms. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non login status because real authentication is not carried out.

Rincian

Terbit di NVD

10 Maret 2022

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://down.chinaz.com/soft/37810.htm product · advisory pihak ketiga
• https://www.cnvd.org.cn/user/myreport/6499961 permissions required · advisory pihak ketiga