CVE-2021-37270

critical

Description

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority.

References

https://www.cnvd.org.cn/flaw/show/2815129

https://github.com/purple-WL/S-cms-Unauthorized

Details

Source: Mitre, NVD

Published: 2021-09-27

Updated: 2021-10-06

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H