CVE-2020-19137 | BDVDB-2026-160264 Detail

Description#

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10".

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ShuaiJunlan/Autumn/issues/82

Exploit#

No public exploit known

History#

Version 12021-09-08Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.