CVE-2024-37767

2024-07-0500:00:00

mitre

www.cve.org

insecure permissions

api

unauthorized access

crafted request

EPSS

Percentile

9.1%

Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request.

References

github.com/b1ackc4t/14Finger/issues/12

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2024-37767