CVE-2018-20301
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-20301
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20301.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-20301
- Aliases
- Published
- 2018-12-20T09:29:00Z
- Modified
- 2025-01-14T07:27:56.404399Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in Steve Pallen Coherence before 0.5.2 that is similar to a Mass Assignment vulnerability. In particular, "registration" endpoints (e.g., creating, editing, updating) allow users to update any coherencefields data. For example, users can automatically confirm their accounts by sending the confirmedat parameter with their registration request.
- References