VULNERABILITY INTELLIGENCE

CVE-2019-17605

CVSS score8.8 HIGH

EPSS probability1.08%

CISA KEVNot currently listed

Published2019-11-07

Last modified2026-06-17

Description

A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candidate's account (by also exploiting CVE-2019-17604) via a modified candidate id and an additional password parameter. The outcome is that the password of this other candidate is changed.