Description
tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column.
Unscored
CVE-2018-19109
EUVD-2018-10822GHSA-734m-wgx8-qcgv
tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list dir…
Published Nov 8, 2018 · Updated Aug 5, 2024 · Assigned by mitre