cve/2012/CVE-2012-6563.md
2024-06-18 02:51:15 +02:00

657 B

CVE-2012-6563

Description

engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.

POC

Reference

Github

No PoCs found on GitHub currently.