Vulnerabilities > Discuz > Discuzx > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-01-12 CVE-2018-5377 Missing Authorization vulnerability in Discuz Discuzx X3.4
Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter.
network
low complexity
discuz CWE-862
critical
9.8