CVE-2012-3473

critical

Description

The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions.

References

https://github.com/ushahidi/Ushahidi_Web/commit/f67f4ad

http://openwall.com/lists/oss-security/2012/08/09/5

Details

Source: Mitre, NVD

Published: 2012-08-12

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.00299

Detections

Analytics