CVE-2018-16704

—

CVSS 3.0

4.3 medium

EPSS

<1%p54

Published

Sep 7, 2018 (Sep 7, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (logged in users) to view profile page of other users, as demonstrated by navigating to user/3 on demo.gleezcms.org.

Vendors: gleeztech
Products: gleezcms
Weakness: CWE-639
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.