CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

CVE-2024-53473

creationtimestamp| type| source ---|---|--- 2024-12-07 22:11:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113613832658577033 2024-12-08 01:04:22+00:00| seen| https://t.me/cvedetector/12329...

CVE-2024-53473

CVE-2024-53473 concerns WeGIA. The affected software is WeGIA version 3.2.0 before 3998672, where the password-change operation does not verify user permissions. This can allow unauthorized password changes. Public references consolidate that the fix is in 3998672 and later. Practical impact is u...