CVE-2024-42759

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint...

CVE-2024-42759

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint...

CVE-2024-42759

Ellevo v6.2.0.38160 contains a privilege-escalation issue exploitable via the /api/usuario/cadastrodesuplente endpoint. The vulnerability permits a remote attacker to escalate privileges, with impact on confidentiality, integrity, and availability described as HIGH/HIGH/LOW respectively (per CVSS...