CVE-2024-11301

In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This allows an attacker to overwrite existing data by submitting a POST request with the same slug as an existing evaluator...

Lack of unique constraint validation allows overwriting evaluators

Description The application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This allows an attacker to overwrite existing data by submitting a POST request with the same slug as an existing evaluator. Since the backend lacks databa...

Citrix Provisioning Services - Unable To Delete Server From Farm

While trying to delete a PVS server from the farm you are greeted by an unexpected error: Error Constraint Failed A database constraint caused an Add or Update to be stopped. --Details-- The DELETE statement conflicted with the REFERENCE constraint "FKCeipDataServer". The conflict occurred in...