An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
https://github.com/cai-niao98/lin-cms/ | third party advisory exploit |
https://gist.github.com/cai-niao98/58c97899695488bd73a73d56adf44c4c | third party advisory |