5 matches found
CVE-2024-39025
Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data...
CVE-2024-39025
creationtimestamp| type| source ---|---|--- 2024-12-27 20:02:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113726571815938570 2024-12-27 20:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecskcfuut2m 2024-12-27 21:52:45+00:00| seen|...
CVE-2024-39025
Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data...
CVE-2024-39025
Cpacker MemGPT (now known as Letta ) version v0.3.17 is affected by an incorrect access control vulnerability in the /users endpoint. This flaw allows an attacker to bypass authorization checks to access sensitive data . To mitigate this risk, it is recommended to disable access to the /users end...