CWE Code: 19
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Data Processing Errors
Summary: improper handling of extra parameters in the accountcontroller (user profile edit) in jakub chodounsky bonobo git server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-04-24
Last Modified Date: 2019-05-01