Description
Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated by login=victim to the users/21/edit URI.
Unscored
CVE-2020-8439
EUVD-2020-29306GHSA-p533-q52w-q6fm
Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit …
Published Mar 7, 2020 · Updated Aug 4, 2024 · Assigned by mitre