Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
对假设不可变Web参数的外部可控制
Vulnerability Title
Checkmate 安全漏洞
Vulnerability Description
Checkmate是BlueWave开源的一个开源、自托管的工具，旨在通过精美的可视化实时跟踪和监控服务器硬件、正常运行时间、响应时间和事件。 Checkmate 2.0.2及之前版本存在安全漏洞，该漏洞源于邀请请求可被修改以指定特权角色，可能导致权限提升。
CVSS Information
N/A
Vulnerability Type
N/A