Vendor/product archive

project_hashtopussy / hashtopussy CVEs

Beta · best-effort

2 CVEs tagged to project_hashtopussy / hashtopussy — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to project_hashtopussy vendor archive

CVE-2017-11681

Published Jul 27, 2017

Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonst…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2017-11680

Published Jul 27, 2017

Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1