PoC Index

CVE-2020-35737

HIGH 7.5EPSS 10.3%

In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information by manipulating the unvalidated UserIndex parameter, aka Insecure Direct Object Reference.

CVSS v3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
10.31% chance of exploitation in the next 30 days, 95th percentile
Published
2020-12-30
Updated
2024-08-04

Proof-of-concept exploits (1)

ExploitDB entries (1)

References

Related