Beveiligingsadvies

CVE-2024-7473

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-29 12:48:38

Laatst bijgewerkt 2024-11-03 18:27:26

Toegewezen door @huntr_ai

CVSS-score 7.5

Status PUBLISHED

Beschrijving

An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions 1.3.2. This vulnerability allows an authenticated user to update other users' prompts by manipulating the 'id' parameter in the request. The issue is fixed in version 1.4.3.

← Alle CVE's bekijken Bekijk op cve.org ↗