5 matches found
CVE-2024-39025
Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data...
CVE-2024-39025
creationtimestamp| type| source ---|---|--- 2024-12-27 20:02:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113726571815938570 2024-12-27 20:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecskcfuut2m 2024-12-27 21:52:45+00:00| seen|...
CVE-2024-39025
Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data...
CVE-2024-39025
CVE-2024-39025 affects Letta/MemGPT v0.3.17 (Cpacker MemGPT) and is caused by incorrect access control in the "/users" endpoint. Multiple sources (Red Hat, NVD, OSV, GHSA, Veracode, CIRCL, CNNVD, Snyk) describe that missing authorization in the get_all_users() flow can expose sensitive data. Cond...
