Description
Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information.
Unscored
CVE-2022-27960
EUVD-2022-32446GHSA-7j2x-68p3-rh6g
Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrari…
Published Apr 10, 2022 · Updated Aug 3, 2024 · Assigned by mitre