medium5.4
CVE-2022-27958
Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' …
Impact
Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Febs-Security Project | Febs-Security | Version 1.0 |