medium6.5
CVE-2021-46085
OneBlog <= 2.2.8 is vulnerable to Insecure Permissions.
Impact
OneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oneblog Project | Oneblog | through 2.2.8 |