A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call...
6.5CVSS0.00202EPSS
SaveExploits0References1
NVD•added 2023/06/26 8:15 p.m.•34 views
CVE-2023-34421
A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically crafted web API call due to insufficient input validation...
