Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Toni Mueller Subscribe
Filtered by product Roundup
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-2737 1 Toni Mueller 1 Roundup 2009-08-25 5.5 MEDIUM N/A
The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that class, as demonstrated by editing all queries, modifying settings, and adding roles to users.