Lucene search

K

MitreCVE-2024-37767

HistoryJul 05, 2024 - 5:15 p.m.

CVE-2024-37767

2024-07-0517:15:11

mitre

web.nvd.nist.gov

33

insecure permissions

14finger v1.1

user information access

crafted get request

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

9.1%

Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request.

References

github.com/b1ackc4t/14Finger/issues/12

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

9.1%

Related for CVE-2024-37767

nvd1 vulnrichment1 cvelist1