CVE-2022-40036 Information

Description

An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserList component.

Reference

https://github.com/rawchen/blog-ssm/issues/5