Evergreen-Ils: >> Evergreen >> 2.6.7 Security Vulnerabilities
Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFF_LOGIN permission to obtain sensitive settings history information by leveraging listing of open-ils.pcrud as a controller in the IDL.
CVSS Score
6.5
EPSS Score
0.005
Published
2018-02-01