Beveiligingsadvies

CVE-2024-5126

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-06 18:11:28

Laatst bijgewerkt 2025-10-15 12:49:40

Toegewezen door @huntr_ai

CVSS-score 7.6

Status PUBLISHED

Beschrijving

An improper access control vulnerability exists in the lunary-ai/lunary repository, specifically within the versions.patch functionality for updating prompts. Affected versions include 1.2.2 up to but not including 1.2.25. The vulnerability allows unauthorized users to update prompt details due to insufficient access control checks. This issue was addressed and fixed in version 1.2.25.

← Alle CVE's bekijken Bekijk op cve.org ↗