216.73.217.22

CVE-2024-37767

· Published 05/07/2024 17:15 · Modified 05/07/2024 17:15

Labels: CVE-2024-37767 2024-07-05CVE-2024-37767[email protected]

Essential information

Published
05/07/2024 17:15
Modified
05/07/2024 17:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

References