CVE-2024-25170-Mezzanine-v6.0.0

제품: Mezzanine CMS 버전: v6.0.0 발견 날짜: 10.01.2024. 보고 날짜: 10.01.2024. 취약점 유형: 부적절한 접근 제어. CVE ID: CVE-2024-25170 설명: Mezzanine v6.0.0에서 Host Header를 조작하여 공격자가 접근 제어를 우회할 수 있는 문제가 발견되었습니다. POC는 곧 공개됩니다:...

CVE-2024-25170

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

CVE-2024-25170

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

CVE-2024-25170

Mezzanine v6.0.0 contains a vulnerability where attackers can bypass access controls by manipulating the Host header. Descriptions across Red Hat, GHSA, OSV, NVD, and related advisories consistently reference Host header-based bypass with potential unauthorized access to information or systems. T...

CVE-2024-25170

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...