CVE-2024-36691

Publication date

2024-06-12 00:00:00

Family

mitre

State

PUBLISHED

Description

Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows authenticated attackers to arbitrarily modify users account information.