10
CVE-2020-26167
- EPSS 2.95%
- Veröffentlicht 04.11.2020 17:15:13
- Zuletzt bearbeitet 30.05.2025 16:15:25
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Thedaylightstudio ≫ Fuel Cms Version <= 1.4.12
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.95% | 0.859 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|