Ihatemoney

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ihatemoney records in CISA KEV

No Ihatemoney vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

I Hate Money 1 record LOW

Records

1 record

TI-2020-11894 CVE-2020-15120 · GHSA-67j9-c52g-w2q9

Authorization Bypass in I hate money

LOW 24

In "I hate money" before version 4.1.5, an authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01029 Published 2020-07-27 Fixed in 4.1.5 CWE-863

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0