Description
UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.
Scores
CVSS v3
9.8
EPSS
0.0044
EPSS Percentile
63.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-565
Status
published
Products (1)
ucms_project/ucms
1.6
Published
Sep 12, 2022
Tracked Since
Feb 18, 2026