Lucene search

K

CVE-2024-12307 Function-Level Access Control Vulnerability Allows Unauthorized Modification of Student Data in Unifiedtransform

🗓️ 09 Dec 2024 08:45:50Reported by NCSC.chType 
cvelist
 cvelist
🔗 www.cve.org👁 6 Views

Function-level access control flaw in Unifiedtransform lets unauthorized edits to student data.

Show more
Related
Affected
Refs
[
  {
    "defaultStatus": "affected",
    "product": "Unifiedtransform",
    "programFiles": [
      "https://github.com/changeweb/Unifiedtransform/blob/fac7f551ff9284f9586a6644b057b76c1254c194/app/Http/Controllers/UserController.php#L132"
    ],
    "repo": "https://github.com/changeweb/Unifiedtransform",
    "vendor": "Unifiedtransform",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo