Beveiligingsadvies

CVE-2024-3504

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-06 17:53:40

Laatst bijgewerkt 2025-10-15 12:49:37

Toegewezen door @huntr_ai

CVSS-score 8.1

Status PUBLISHED

Beschrijving

An improper access control vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, where an admin can update any organization user to the organization owner. This vulnerability allows the elevated user to delete projects within the organization. The issue is resolved in version 1.2.7.

← Alle CVE's bekijken Bekijk op cve.org ↗