CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

CVE-2024-53473

creationtimestamp| type| source ---|---|--- 2024-12-07 22:11:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113613832658577033 2024-12-08 01:04:22+00:00| seen| https://t.me/cvedetector/12329...

CVE-2024-53473

The web manager WeGIA (developed by Nilson Lazarin) versions 3.2.0 before 3998672 is vulnerable to a security flaw where the software fails to verify permissions when changing a password. This lack of authorization allows for unauthorized password changes , potentially compromising account integr...