CVE-2018-5386

PoC —

CVSS 3.0

7.5 high

EPSS

5%p91

Published

Jul 24, 2018 (Jul 24, 2018)

Modified

Jun 17, 2026

Description

Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.

Vendors: navarino
Products: infinity
Weakness: CWE-288, CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.6%)

In the news0 stories

No ingested article mentions this CVE yet.