Description
Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.
References (3)
Core 3
Core References
Exploit, Patch, Third Party Advisory
https://huntr.dev/bounties/fa741f95-b53c-4ed7-b157-e32c5145164c
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/FV7XL3CY3K3K5ER3ASMEQA546MIQQ7QM/
Scores
CVSS v3
5.3
EPSS
0.0020
EPSS Percentile
42.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-284
Status
published
Products (3)
fedoraproject/fedora
39
net.sourceforge.plantuml/plantuml-mit
0 - 1.2023.9Maven
plantuml/plantuml
< 1.2023.9
Published
Jun 27, 2023
Tracked Since
Feb 18, 2026