Lucene search
K

7 matches found

OSV
OSV
added 2024/01/11 9:15 p.m.2 views

CVE-2023-7226

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

6.5CVSS5.4AI score
Exploits0References3
NVD
NVD
added 2024/01/11 9:15 p.m.8 views

CVE-2023-7226

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

6.5CVSS6.5AI score0.00144EPSS
Exploits1References3
Prion
Prion
added 2024/01/11 9:15 p.m.17 views

Design/Logic Flaw

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

6.5CVSS7.2AI score0.00144EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/11 8:31 p.m.12 views

CVE-2023-7226 meetyoucrop big-whale Admin Module all.api improper ownership management

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

6.5CVSS7AI score0.00144EPSS
Exploits1References3
CVE
CVE
added 2024/01/11 8:31 p.m.36 views

CVE-2023-7226

CVE-2023-7226 affects meetyoucrop big-whale v1.1, specifically the Admin Module endpoint /auth/user/all.api. The root cause is manipulation of the id parameter in that endpoint, leading to improper ownership management. Documents consistently note remote exploit potential and public disclosure of...

6.5CVSS6.5AI score0.00144EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/11 12:0 a.m.3 views

PT-2024-15237 · Unknown · Meetyoucrop Big-Whale

Name of the Vulnerable Software and Affected Versions: meetyoucrop big-whale version 1.1 Description: A critical issue affects some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the id argument leads to improper ownership management. The...

6.5CVSS6.7AI score0.00144EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/01/11 12:0 a.m.2 views

meetyoucrop big-whale security breach

big-whale is a task scheduling platform open-sourced by Meiyu meetyoucrop. A security vulnerability exists in meetyoucrop big-whale version 1.1, which stems from the presence of an unknown function in /auth/user/all.api in the component Admin Module, which leads to ownership mismanagement via the...

6.5CVSS6.8AI score0.00144EPSS
Exploits1References4
Rows per page
Query Builder