CVE-2024-6867

An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the "runs/runid/related" endpoint. This endpoint does not verify that the user has the necessary access rights to the runs they are accessing. As a result, it returns not only the specified run but also all ru...

CVE-2024-6867: Insufficient Granularity of Access Control

An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the runs/runid/related endpoint. This endpoint does not verify that the user has the necessary access rights to the runs they are accessing. As a result, it returns not only the specified run but also all runs...