In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Fri, 30 May 2025 16:15:00 +0000

Type Values Removed Values Added
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-05-30T16:01:24.418Z

Reserved: 2020-09-30T00:00:00.000Z

Link: CVE-2020-26167

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-11-04T17:15:13.207

Modified: 2025-05-30T16:15:25.470

Link: CVE-2020-26167

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.