CVE-2024-12666

MEDIUM Year: 2024
CVSS v3 Score
8.8
High
CVSS v2 Score
5.8
Medium
Weakness Type
CWE-266
View all →

Vulnerability Description

A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?do=admin:user:editPost of the component User Management Page. The manipulation leads to improper handling of insufficient privileges. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Related Vulnerabilities

CVE-2020-7009

HIGH
CVSS:8.8(High)

Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is able to generate an API key can ...

CWE-2662020

CVE-2020-7014

HIGH
CVSS:8.8(High)

The fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys and al...

CWE-2662020

CVE-2020-7018

HIGH
CVSS:8.8(High)

Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will be able to view the administrator API cred...

CWE-2662020

CVE-2022-20759

HIGH
CVSS:8.8(High)

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authen...

CWE-2662022

CVE-2022-2637

HIGH
CVSS:8.8(High)

Incorrect Privilege Assignment vulnerability in Hitachi Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.This issue affects Hitachi Storage Pl...

CWE-2662022

CVE-2022-3496

HIGH
CVSS:8.8(High)

A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Adm...

CWE-2662022