NetSight
medium6.5

CVE-2022-34012

Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges.

Impact

Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges.

Affected products

VendorProductAffected versions
ZhydOneblog
Version 2.3.4

Weakness classification

References