CVE-2019-14345
published 2019-11-15CVE-2019-14345: TemaTres 3.0 allows remote unprivileged users to create an administrator account
PriorityP261critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
2.02%
78.5th percentile
TemaTres 3.0 allows remote unprivileged users to create an administrator account
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vocabularyserver | tematres | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- ·The exploit targets TemaTres version 3.0 specifically; the vulnerable endpoints /tematres/vocab/login.php and /tematres/vocab/admin.php are only present in this version. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
https://github.com/tematres/TemaTres-Vocabulary-Server/commits/masterhttps://medium.com/%40Pablo0xSantiago/cve-2019-14345-ff6f6d9fd30fhttps://sourceforge.net/p/tematres/mailman/tematres-help/https://www.hackpuntes.comhttps://github.com/tematres/TemaTres-Vocabulary-Server/commits/masterhttps://medium.com/%40Pablo0xSantiago/cve-2019-14345-ff6f6d9fd30fhttps://sourceforge.net/p/tematres/mailman/tematres-help/https://www.hackpuntes.com
2019-11-15
Published