medium5.4
CVE-2022-27960
Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' per…
Impact
Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ofcms Project | Ofcms | Version 1.1.4 |