mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-26 12:20:24 +01:00
693 B
693 B
CVE-2015-2203
Description
Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFF_LOGIN permission to obtain sensitive settings history information by leveraging listing of open-ils.pcrud as a controller in the IDL.
POC
Reference
Github
No PoCs found on GitHub currently.