5 matches found
CVE-2024-37758
Improper access control in the endpoint /RoleMenuMapping/AddRoleMenu of Digiteam v4.21.0.0 allows authenticated attackers to escalate privileges...
CVE-2024-37758
creationtimestamp| type| source ---|---|--- 2024-12-20 19:01:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113686693262617989 2024-12-20 19:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr3wooi472x 2024-12-20 20:55:57+00:00| seen|...
CVE-2024-37758
The Digiteam v4.21.0.0 sales digitization and gamification mobile solution contains an improper access control vulnerability in the /RoleMenuMapping/AddRoleMenu endpoint. This flaw allows authenticated attackers to achieve privilege escalation . While no official patch is currently documented, it...
