CVE-2020-6949

A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-01-13

Last modified

2024-08-04

Weaknesses

CWE-269

Affected products

• Hashbrown Cms (Hashbrowncms)

References

• https://github.com/HashBrownCMS/hashbrown-cms/issues/327