Energycap: Security Vulnerabilities
Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with access rights matching the user who created the dashboard.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-11-08