CVE-2024-42759

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint...

CVE-2024-42759

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint...

PT-2024-30129 · Ellevo · Ellevo

Name of the Vulnerable Software and Affected Versions: Ellevo version 6.2.0.38160 Description: An issue in Ellevo allows a remote attacker to escalate privileges via the "/api/usuario/cadastrodesuplente" endpoint. This could lead to unauthorized access. Recommendations: For Ellevo version...

CVE-2024-42759

Ellevo v6.2.0.38160 contains a privilege-escalation issue exploitable via the /api/usuario/cadastrodesuplente endpoint. The vulnerability permits a remote attacker to escalate privileges, with impact on confidentiality, integrity, and availability described as HIGH/HIGH/LOW respectively (per CVSS...