Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/b1ackc4t/14Finger/issues/12 |
Configurations
No configuration.
History
No history.
Information
Published : 2024-07-05 17:15
Updated : 2024-07-08 15:49
NVD link : CVE-2024-37767
Mitre link : CVE-2024-37767
CVE.ORG link : CVE-2024-37767
JSON object : View
Products Affected
No product.
CWE
No CWE.