CVE-2018-1000141
Last modified
CVE-2018-1000141 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access (read, write and delete) to project discussions.. EPSS estimates a 1.35% chance of exploitation in the next 30 days.
Description
I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access (read, write and delete) to project discussions.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Scilico | I\, Librarian | <= 4.9 |
References
- https://github.com/mkucej/i-librarian/issues/124Third Party Advisory
- https://github.com/mkucej/i-librarian/issues/124Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2018-1000141?
How severe is CVE-2018-1000141?
How do I fix CVE-2018-1000141?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-1000135GNOME NetworkManager version 1.10.2 and earlier contains a I…
- CVE-2018-1000136Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0…
- CVE-2018-1000137I, Librarian version 4.8 and earlier contains a Cross site R…8.8
- CVE-2018-1000138I, Librarian version 4.8 and earlier contains a SSRF vulnera…9.1
- CVE-2018-1000139I, Librarian version 4.8 and earlier contains a Cross Site S…6.1
- CVE-2018-1000140rsyslog librelp version 1.2.14 and earlier contains a Buffer…
- CVE-2018-1000142An exposure of sensitive information vulnerability exists in…
- CVE-2018-1000143An exposure of sensitive information vulnerability exists in…
- CVE-2018-1000144A cross site scripting vulnerability exists in Jenkins Cucum…
- CVE-2018-1000145An exposure of sensitive information vulnerability exists in…
- CVE-2018-1000146An arbitrary code execution vulnerability exists in Liquibas…
- CVE-2018-1000147An exposure of sensitive information vulnerability exists in…
Are you affected by CVE-2018-1000141?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST