Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Nekocc

#29645of 53,608
8.8Total CVSS
Vulnerabilities · 1
PT-2023-13665
8.8
2023-02-15
Unknown · Niterforum · CVE-2022-38935
**Name of the Vulnerable Software and Affected Versions** NiterForum version 2.5.0-beta **Description** An issue was discovered in the `/src/main/java/cn/niter/forum/api/SsoApi.java` and `/src/main/java/cn/niter/forum/controller/AdminController.java` files, allowing attackers to gain escalated privileges. **Recommendations** For NiterForum version 2.5.0-beta, consider disabling the `SsoApi` and `AdminController` functions until a patch is available. Restrict access to these components to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.