{"data":{"id":"deed2569-81f3-4c4e-b00a-abcf4e5760da","title":"CVE-2018-20301: An issue was discovered in Steve Pallen Coherence before 0.5.2 that is similar to a Mass Assignment vulnerability. In…","summary":"CVE-2018-20301 affects Steve Pallen Coherence before 0.5.2, a flaw similar to a Mass Assignment vulnerability. Its registration endpoints, such as those for creating, editing and updating, let users modify any coherence_fields data, for example by sending confirmed_at with a registration request to confirm their own account. The weakness is classified as CWE-20 (Improper Input Validation), and NIST has not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2018-20301","publishedAt":"2018-12-20T09:29:00.243Z","cveId":"CVE-2018-20301","cweIds":["CWE-20"],"cvssScore":"4","cvssSeverity":null,"severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["coherence@< 0.5.2 (fixed: 0.5.2)"],"affectedPackageNames":["coherence"],"affectedPackageRefs":["erlang:coherence"],"affectedVendors":[],"affectedVendorsRaw":["Coherence"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Steve Pallen Coherence mass assignment in registration endpoints","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00896,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-mrq8-53r4-3j5m"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T04:01:14.926Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-10-29T21:53:04.354Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.5,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":null,"name":"coherence","fixedVersion":"0.5.2","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:53:04.202Z"}]}}