CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Access Control
Summary: incorrect access control in the administrative management interface in simplybook.me enterprise before 2019-04-23 allows authenticated low-priv users to elevate privileges to full admin rights via a crafted http put request, as demonstrated by modified json data to a /v2/rest/ uri.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-04-25
Last Modified Date: 2019-05-03