Threats tagged 'ghsa-2wm8-6hj5-fwmq'

A vulnerability in Netiket Information Technologies EdoWEB before version 780-g7 allows authorization bypass via a user-controlled key, enabling access to functionality not properly restricted by access control lists (ACLs). The flaw is identified as CWE-639 and has a CVSS 3.1 base score of 4.3, indicating medium severity. There is no public information about exploits in the wild or available patches.