Junglewise Threat Intelligence

CVE-2020-15248: Privilege escalation by backend users assigned to the default "Publisher" system role

CVE-2020-15248 · Severity: low · CVSS 3.1 · Published 2020-11-23

Technologies: october/backend (Packagist). Vendors: Packagist.

Executive brief

Privilege escalation by backend users assigned to the default "Publisher" system role

Affected products

  • Packagist october/backend

Related threats