CVE-2020-5539

—

CVSS 3.1

6.5 medium

EPSS

<1%p56

Published

Mar 2, 2020 (Mar 2, 2020)

Modified

Jun 17, 2026

Description

GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors.

Vendors: grandit
Products: grandit
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.