Loading vulnerability details…
CVSS v3.1
N/A
EPSS
0.58%
Published
Jul 31, 2018
Modified
Nov 21, 2024
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.
Weaknesses (CWE)
Affected Products (1)
References (2)