Vulnerability GHSA-mpg8-8x9c-p9gv
Critical
CRITICAL RISK
CVSS Score: 9.8
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
1 year ago
February 13, 2025 at 12:33 AM UTC
MaysWind ezBookkeeping has Improper Privilege Management
<=0.7.0
<=0.7.0
Summary
MaysWind ezBookkeeping has Improper Privilege Management
Details
An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
8 hours ago
ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header
>=0.10.0 <1.6.0 GHSA-wchh-mrv2-5h4q
>=0.10.0 <1.6.0 GHSA-wchh-mrv2-5h4q
Unknown
1 year ago
Missing rate limit in MaysWind ezBookkeeping in github.com/mayswind/ezbookkeeping
* GO-2025-3466
* GO-2025-3466
Unknown
1 year ago
MaysWind ezBookkeeping has Improper Privilege Management in github.com/mayswind/ezbookkeeping
* GO-2025-3474
* GO-2025-3474
Medium Risk
1 year ago
Missing rate limit in MaysWind ezBookkeeping
<=0.7.0 GHSA-772m-773g-qmhc
<=0.7.0 GHSA-772m-773g-qmhc
Impacted packages
Timeline
Published
1 year ago
February 13, 2025 at 12:33 AM UTC
Last Modified
1 year ago
March 03, 2025 at 07:42 PM UTC