CVE-2024-37769

2024-07-0500:00:00

mitre

github.com

insecure permissions

14finger v1.1

privilege escalation

crafted post request

AI Score

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:b1ackc4t:14finger:1.1:*:*:*:*:*:*:*"
    ],
    "vendor": "b1ackc4t",
    "product": "14finger",
    "versions": [
      {
        "status": "affected",
        "version": "1.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

github.com/b1ackc4t/14Finger/issues/12