CVE-2018-16704

CVE-2018-16704

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (logged in users) to view profile page of other users, as demonstrated by navigating to user/3 on demo.gleezcms.org.

CVSS 4.3 · Medium · EPSS 0.8%

Published

2018-09-07T17:00:00.000Z

Updated

2024-08-05T10:32:52.983Z

Stack: php

Check your server →