CVE-2024-51240

creationtimestamp| type| source ---|---|--- 2024-11-05 18:26:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113431751230359116 2024-11-05 21:25:35+00:00| seen| https://t.me/cvedetector/9936...

CVE-2024-51240

The luci-mod-rpc package in OpenWRT Luci LTS is vulnerable to a privilege escalation flaw. An attacker can elevate privileges from an admin account to root by exploiting the JSON-RPC-API , which is exposed by the package. The root cause is linked to insufficient protection of registration data wi...