Medium severity5.4NVD Advisory· Published Apr 10, 2022· Updated Jun 17, 2026
CVE-2022-27958
CVE-2022-27958
Description
Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information.
Affected products
3- cpe:2.3:a:febs-security_project:febs-security:1.0:*:*:*:*:*:*:*
- FEBS-Security/FEBS-Securitydescription
- Range: = 1.0
Patches
Vulnerability mechanics
References
1- github.com/afeng2016-s/CVE-Request/blob/main/febs-security/febs.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.