Skip to content
OpenAdvisories

Vendor

Movim

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 3.1

    Movim through 0.35.5 Authorization Bypass via Post::ajaxGetPost Cached Post Read

    Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to read restricted posts by supplying server, node and nodeid values. Attackers who know item identifiers can retrieve cached community or…