medium6.5
CVE-2019-14253
An issue was discovered in servletcontroller in the secure portal in Publisure 2.1.2.
Impact
An issue was discovered in servletcontroller in the secure portal in Publisure 2.1.2. One can bypass authentication and perform a query on PHP forms within the /AdminDir folder that should be restricted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Publisure | Publisure | Version 2.1.2 |