💣Exploit CVE-2024-3504 - An improper access control vulnerability exists in

[Maksim]

CVE ID : CVE-2024-3504
Published : June 6, 2024, 6:15 p.m. | 37 minutes ago
Description : An improper access control vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, where an admin can update any organization user to the organization owner. This vulnerability allows the elevated user to delete projects within the organization. The issue is resolved in version 1.2.7.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.