Product · https://github.com/JasonEtco

flintcms

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

Critical 9.8

CVE-2018-3783

Privilege Escalation due to Blind NoSQL Injection in flintcms

A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.

https://github.com/JasonEtco flintcms flintcms npm

Aug 17, 2018