medium6.5
CVE-2022-40036
An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserLi…
Impact
An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserList component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blog-Ssm Project | Blog-Ssm | Version 1.0 |