CVE-2024-50633

CVE-2024-50633 🏆 - CVE-2024-50633 : Indico BOLA脆弱性 IndicoのBOLA脆弱性を発見し、報告しました。 📜 CVE-2024-50633 の説明 Indico v3.2.9 の Broken Object Level Authorization BOLA 脆弱性により、攻撃者はAPIリクエストを操作して機密のユーザー情報にアクセスできます。 クエリ CVE-2024-50633 FOFA : title="Indico" || header="Indico" Google Dork : intitle:"Indico"...

Exploit for Insertion of Sensitive Information Into Sent Data in Cern Indico

CVE-2024-50633 🏆 - CVE-2024-50633: Indico BOLA Vuln...

CVE-2024-50633: Insertion of Sensitive Information Into Sent Data

A Broken Object Level Authorization BOLA vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals. NOTE: this is disputed by the Supplier because the product intentionally lets all users retrieve certain...