CVE-2021-45347

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-02-14

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• Zzcms (Zzcms)

References

• https://github.com/forget-code/zzcms/issues/2