CVE-2024-50650

Python_book V1.0 is affected by an Incorrect Access Control vulnerability that lets an attacker obtain sensitive information of users by modifying the ID parameter. Root cause appears to be inadequate authorization for ID-based requests. Reported across multiple sources (NVD, Red Hat, CNNVD, CVE ...

CVE-2024-50649

The CVE-2024-50649 entry describes an arbitrary file upload vulnerability in the user avatar upload function of python_book V1.0. Affected component: user avatar upload handler in python_book. Root cause: arbitrary file upload capability enabling potentially unsafe files to be uploaded. Impact: a...