CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

CVE-2024-40404: Missing Authentication for Critical Function

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

CVE-2024-40404

Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 are susceptible to an access control issue within the API endpoint used to establish Web Sockets connections. This vulnerability allows for unauthorized access due to improper control mechanisms at the connection endpoint. To mitig...