CVE-2024-11300

In lunary-ai/lunary before version 1.6.3, an improper access control vulnerability exists where a user can access prompt data of another user. This issue affects version 1.6.2 and the main branch. The vulnerability allows unauthorized users to view sensitive prompt data by accessing specific URLs...

CVE-2024-11300

CVE-2024-11300 affects lunary-ai/lunary prior to version 1.6.3, via improper access control that lets a user view another user’s prompt data. The issue is triggered by accessing specific URLs (notably /prompts/prompt_id) and impacts 1.6.2 and the main branch. Documented characteristics: unauthori...