| शीर्षक | liufee cms 2.1.1 Information Disclosure |
|---|
| विवरण | https://github.com/liufee/cms/
A vulnerability has been found in Feehi CMS 2.1.1 and classified as problematic. Affected is an unknown function of the /api/users endpoint. The manipulation leads to information disclosure. The attack can be initiated remotely. A regular authenticated user can enumerate all registered users' personally identifiable information (PII), including usernames, email addresses, and account status, without any role-based access control. |
|---|
| स्रोत | ⚠️ https://github.com/liufee/cms/issues/88 |
|---|
| उपयोगकर्ता | byname (UID 98259) |
|---|
| सबमिशन | 29/05/2026 09:42 AM (4 महीनों पहले) |
|---|
| संयम | 28/06/2026 12:15 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 374552 [Feehi CMS तक 2.1.1 API /api/users अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|