Description
Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10".
Unscored
CVE-2020-19137
EUVD-2020-11044GHSA-6q4x-rgwv-967m
Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "aut…
Published Sep 8, 2021 · Updated Aug 4, 2024 · Assigned by mitre