Skip to content
OpenAdvisories
Unscored CVE-2021-45347 EUVD-2021-32120GHSA-hwfj-cvxw-8xw6

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name …

Published Feb 14, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password.

References