flintcms vulnerabilities

Products

• flintcms 1

Latest flintcms CVEs

Newest publication first

1. CVE-2018-3783 Privilege Escalation due to Blind NoSQL Injection in flintcms

   Published 2018-08-17

   Critical·CVSS 9.8 EPSS 3.8%

   A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.