CVE-2018-5955

An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.

An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.

Se ha descubierto un problema en GitStack hasta las versiones 2.3.10. Las entradas controladas por el usuario no se filtran lo suficiente, lo que permite que un atacante no autenticado añada un usuario al servidor mediante los campos username y password en el URI rest/user/.