{"items":[{"id":"CVE-2018-3783","published":"2018-08-17T13:00:00.000Z","updated":"2024-08-05T04:50:30.738Z","title":"A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.","severity":"CRITICAL","score":9.8,"vendor":"https://github.com/JasonEtco","product":"flintcms","kev":false,"epss":0.0379,"kevAdded":null}]}