Security Advisory

CVE-2024-40531

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-08-05 00:00:00

Last updated 2025-03-14 18:11:11

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions.

← Browse all CVEs View on cve.org ↗