high8.8
CVE-2018-19109
tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the co…
Impact
tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tianti Project | Tianti | Version 2.3 |