Ellevo 安全漏洞

Ellevo is an enterprise process-oriented software from Ellevo, Inc. A security vulnerability exists in Ellevo version 6.2.0.38160, which originates from allowing remote attackers to elevate privileges via the /api/usuario/cadastrodesuplente endpoint...

CVE-2024-42759

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint...

PT-2024-30129 · Ellevo · Ellevo

Name of the Vulnerable Software and Affected Versions: Ellevo version 6.2.0.38160 Description: An issue in Ellevo allows a remote attacker to escalate privileges via the "/api/usuario/cadastrodesuplente" endpoint. This could lead to unauthorized access. Recommendations: For Ellevo version...

CVE-2024-42759

The enterprise process-oriented software Ellevo version 6.2.0.38160 is affected by a vulnerability that allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint. Successful exploitation could result in unauthorized access . To mitigate this risk, users are ...