Vulnerabilities > CVE-2019-1010084 - Incorrect Authorization vulnerability in Dancer::Plugin::Simplecrud Project Dancer::Plugin::Simplecrud

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
dancer
CWE-863
NVD
Published: 2019-07-17
Updated: 2020-08-24

Summary

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to _ensure_auth() wrapper result in authentication-checking not being applied to al routes.

Vulnerable Configurations

Part Description Count
Application
Dancer\
18

Common Weakness Enumeration (CWE)

References