Beveiligingsadvies

CVE-2020-27358

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-10-31 16:18:43

Laatst bijgewerkt 2024-08-04 16:11:36

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

An issue was discovered in REDCap 8.11.6 through 9.x before 10. The messenger's CSV feature (that allows users to export their conversation threads as CSV) allows non-privileged users to export one another's conversation threads by changing the thread_id parameter in the request to the endpoint Messenger/messenger_download_csv.php?title=Hey&thread_id={THREAD_ID}.

← Alle CVE's bekijken Bekijk op cve.org ↗