CVE-2020-28872

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-28872
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-28872.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-28872
Published
2021-04-12T14:15:14Z
Modified
2025-01-14T08:44:46.702153Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/installation/register.php allows an unauthorized person to create valid credentials.

References

Affected packages

Git / github.com/monitorr/monitorr

Affected ranges

Type
GIT
Repo
https://github.com/monitorr/monitorr
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

1.*

1.0.2d
1.1.0d
1.2.0d
1.2.2d
1.2.3d
1.2.5d
1.2.8d
1.2.9d
1.3.0d
1.3.1d
1.5.0d
1.5.0m
1.5.1d
1.5.2d
1.5.3d
1.5.4d
1.5.5m
1.5.6d
1.5.9d
1.6.0d
1.6.1m
1.6.2d
1.6.3m
1.6.4d
1.7.1d
1.7.2d
1.7.3d
1.7.4d
1.7.5d
1.7.6m

b0.*

b0.5

m0.*

m0.6

v0.*

v0.10.1d
v0.10.1m
v0.10.2d
v0.10.4m
v0.10.5d
v0.10.6d
v0.10.7d
v0.10.8d
v0.11.0d
v0.11.0m
v0.11.1
v0.11.2
v0.11.2d
v0.11.3d
v0.11.4d
v0.11.5d
v0.11.6d
v0.11.7d
v0.11.9d
v0.12.0m
v0.12.1d
v0.12.2d
v0.12.3d
v0.12.4m
v0.12.5d
v0.12.6d
v0.12.7m
v0.12.8d
v0.12.8m
v0.13.0d
v0.13.1d
v0.13.3d
v0.13.3m
v0.14.0d
v0.14.0m
v0.14.1d
v0.14.1m
v0.6m
v0.7d
v0.8.2d
v0.8.5m
v0.8.6d
v0.8m
v0.9.0m
v0.9.1d
v0.9.3m
v0.9.4d
v0.9.5m