high8.8
CVE-2018-5259
Discuz!
Impact
Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Discuz | Discuzx | Version x3.4 |