CVE-2024-22186 — Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking
The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator.
Published: 2024-04-18 · CVSS: 8.7 · CVSS 4.0
The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7