Improper Authorization Affecting kiwitcms package, versions [,12.2)
Threat Intelligence
EPSS
0.1% (44th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-KIWITCMS-5821411
- published 7 Aug 2023
- disclosed 1 Aug 2023
- credit Unknown
Introduced: 1 Aug 2023
CVE-2023-30544 Open this link in a new tabHow to fix?
Upgrade kiwitcms to version 12.2 or higher.
Overview
kiwitcms is a Test Case Management System
Affected versions of this package are vulnerable to Improper Authorization allowing users to update their email addresses via the My profile admin page without the ownership verification performed during account registration.
References
CVSS Scores
version 3.1