CVE-2019-1010084

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to _ensure_auth() wrapper result in authentication-checking not being applied to al routes.

Score

CVSS 3.0 6.5 Medium

Status

Modified - josh@bress.net

Published

2019-07-17

Last modified

2024-08-05

Weaknesses

CWE-863

Affected products

• \ (Dancer\)
• Dancerpluginsimplecrud (Dancerpluginsimplecrud)

References

• https://github.com/bigpresh/Dancer-Plugin-SimpleCRUD/pull/109