A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/cydtseng/Vulnerability-Research/blob/main/ujcms/IDOR-UsernameEnumeration.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.287865 | Permissions Required VDB Entry |
| https://vuldb.com/?id.287865 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.458895 | Third Party Advisory VDB Entry |
Configurations
History
13 Dec 2024, 17:12
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| CPE | cpe:2.3:a:ujcms:ujcms:*:*:*:*:*:*:*:* | |
| First Time |
Ujcms
Ujcms ujcms |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.9 |
| References | () https://vuldb.com/?submit.458895 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/cydtseng/Vulnerability-Research/blob/main/ujcms/IDOR-UsernameEnumeration.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.287865 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.287865 - Permissions Required, VDB Entry |
12 Dec 2024, 01:40
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-12 01:40
Updated : 2024-12-13 17:12
NVD link : CVE-2024-12483
Mitre link : CVE-2024-12483
JSON object : View
Products Affected
ujcms
- ujcms
CWE
CWE-639
Authorization Bypass Through User-Controlled Key