We found results for “”
WS-2018-0182
Good to know:
Date: October 1, 2018
In alterphp/EasyAdminExetensionBundle, versions prior to v1.3.1 are vulnerable against Improper handling of case sensitivity on action parameter. The application does not properly account for differences in case sensitivity on action parameter, thus lead to inconsistency in accessabilty to resources.
Language: PHP
Severity Score
Severity Score
Weakness Type (CWE)
Improper Handling of Case Sensitivity
CWE-178Top Fix
CVSS v3.1
Base Score: |
|
---|---|
Attack Vector (AV): | NETWORK |
Attack Complexity (AC): | LOW |
Privileges Required (PR): | NONE |
User Interaction (UI): | NONE |
Scope (S): | UNCHANGED |
Confidentiality (C): | HIGH |
Integrity (I): | LOW |
Availability (A): | LOW |