Description
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account.
Unscored
CVE-2020-6949
EUVD-2020-28090GHSA-6j5x-7wrv-w5qh
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password…
Published Jan 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre