Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to pri…
Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 (published on 22nd August 2024).
CVSS 4.0HIGH 8.6·Network·Low privileges·No interaction·EPSS 0.00354·Published 2025-05-14·Fixed in 20.19CWE-862
Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to retrieve information about IP infrastructure and credentials.
CVSS 4.0HIGH 7.1·Network·Low privileges·No interaction·EPSS 0.00595·Published 2024-08-07·Fixed in 19.6CWE-213
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations.
THREATIST.IORead the docs