CVE-2024-36535

CVE-2024-36535 affects meshery v0.7.51 and earlier, with insecure permissions that allow an attacker to access the service account token, enabling data access and privilege escalation. Multiple sources (Red Hat, Veracode, OSV, NVD, CNNVD, CVE list, PT-2024-27055) corroborate this description. The...

CVE-2022-31164 Tovy before v0.7.51 vulnerable to users logging in as and impersonating other users

Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. The problem has been patched in version 0.7.51...