The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the image_id parameter.
References
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2020-03-26T19:12:15

Updated: 2020-03-26T19:12:15

Reserved: 2020-02-28T00:00:00


Link: CVE-2020-9468

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2020-03-26T20:15:11.473

Modified: 2021-07-21T11:39:23.747


Link: CVE-2020-9468

JSON object: View

cve-icon Redhat Information

No data.

CWE