Lucene search

MitreCVE-2024-37768

HistoryJul 05, 2024 - 4:15 p.m.

CVE-2024-37768

2024-07-0516:15:05

mitre

web.nvd.nist.gov

14finger v1.1

arbitrary user deletion

api component

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

18.0%

JSON

14Finger v1.1 was discovered to contain an arbitrary user deletion vulnerability via the component /api/admin/user?id.

Affected configurations

Nvd

Node

b1ackc4t14fingerMatch1.1

VendorProductVersionCPE
b1ackc4t14finger1.1cpe:2.3:a:b1ackc4t:14finger:1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
b1ackc4t	14finger	1.1	cpe:2.3:a:b1ackc4t:14finger:1.1:::::::*

References

github.com/b1ackc4t/14Finger/issues/12

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

18.0%

JSON

Related for CVE-2024-37768