CVE-2017-20028: HumHub privileges management
Published Jun 9, 2022
·Updated
A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. It is recommended to upgrade the affected component.
Affected Software
2 affected components
Humhub Humhub=0.20.1
Humhub Humhub=1.0.0-beta3
Event History
Jun 9, 2022
CVE Published
via MITRE·10:36 PM
Data Sourced
via MITRE·10:36 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2017-20028?
CVE-2017-20028 is a vulnerability found in HumHub 0.20.1/1.0.0-beta.3 that allows for privilege escalation.
2
What is the severity of CVE-2017-20028?
CVE-2017-20028 is classified as critical with a severity rating of 9.8 out of 10.
3
How does CVE-2017-20028 affect HumHub?
CVE-2017-20028 affects HumHub 0.20.1 and 1.0.0-beta.3, allowing for privilege escalation.
4
Can CVE-2017-20028 be exploited remotely?
Yes, CVE-2017-20028 can be initiated remotely.
5
How can I fix CVE-2017-20028?
To fix CVE-2017-20028, it is recommended to upgrade to version 1.0.0 of HumHub.