Security Advisory

CVE-2024-5755

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-06-27 18:45:48
Last updated 2024-08-01 21:18:07
Assigner @huntr_ai
State PUBLISHED

Description

In lunary-ai/lunary versions <=v1.2.11, an attacker can bypass email validation by using a dot character (.) in the email address. This allows the creation of multiple accounts with essentially the same email address (e.g., attacker123@gmail.com and attacker.123@gmail.com), leading to incorrect synchronization and potential security issues.